Solved

Time issue with Domain

Posted on 2014-01-29
4
370 Views
Last Modified: 2014-02-10
The issue might be very simple, but I want to avoid any outages.  Basically I want to sync all time to the PDC, and sync the PDC to an external time source server.

Here's my dilemma
We have a PDC running all 5 FSMO roles.  All DCs, servers, clients are showing the same time.  Right now it is off about 5 minutes which is causing some issues internally with the users.  The problem with tinkering with this is all time is set on a Desktop Authority server pushing the time source to each client and server as one of the old DCs.  

I'm more curious what would happen if that setting were to stop setting automatically on the clients and if they'd default back to the domains.

Can anybody send me the sequence of changing this without interrupting any communication within the domain?  

Thanks!!
0
Comment
Question by:OCUW
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 35

Expert Comment

by:Gary Patterson
ID: 39819571
How does desktop authority push out time settings?
0
 

Author Comment

by:OCUW
ID: 39819586
I have no idea to be honest.  There is a setting labeled "Time Synchronization", and from there the settings include just a server name.  

Upon checking the settings again, it looks to be pointed at the PDC, which is what I would want.  But on my client machine I do a net time and see it looking at the old DC.
0
 
LVL 35

Accepted Solution

by:
Gary Patterson earned 500 total points
ID: 39821030
If your users all have local Admin rights, you could just add a line to their login script:

;Configure time service to sync from the domain hierarchy
w32tm /config /syncfromflags:domhier /update

If they don't all have admin rights, you could use a WMI script to run the command on each workstation in the domain.

But I think the best method is to use Group Policy.  Note that you need to set up one GPO for domain controllers and a different one for domain members:

http://blogs.technet.com/b/nepapfe/archive/2013/03/01/it-s-simple-time-configuration-in-active-directory.aspx

Test it on a small subset, and make sure and test it for each different OS version in your network.

- Gary Patterson
0
 

Author Comment

by:OCUW
ID: 39848071
Seemed to fix the issue.  The remaining DCs had a weird GPO attached labeled as something else, screwing up the connection.  And the PDC seemed to be using the CMOS as a time source.  I slowly crept up the CMOS so it wasn't >5min apart from the DCs, set the DCs by removing the GPO, set up the domheir settings, then went to the PDC and pointed it to the NTP server.  

Took a few minutes to get everything going.

Thanks for the help :)
0

Featured Post

On Demand Webinar - Networking for the Cloud Era

This webinar discusses:
-Common barriers companies experience when moving to the cloud
-How SD-WAN changes the way we look at networks
-Best practices customers should employ moving forward with cloud migration
-What happens behind the scenes of SteelConnect’s one-click button

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

You may have a outside contractor who comes in once a week or seasonal to do some work in your office but you only want to give him access to the programs and files he needs and keep privet all other documents and programs, can you do this on a loca…
Dramatic changes are revolutionizing how we build and use technology. Every company is automating, digitizing, and modernizing operations. We need a better, more connected way to work together as teams so we can harness the insights from our system…
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …

710 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question