Solved

Time issue with Domain

Posted on 2014-01-29
4
357 Views
Last Modified: 2014-02-10
The issue might be very simple, but I want to avoid any outages.  Basically I want to sync all time to the PDC, and sync the PDC to an external time source server.

Here's my dilemma
We have a PDC running all 5 FSMO roles.  All DCs, servers, clients are showing the same time.  Right now it is off about 5 minutes which is causing some issues internally with the users.  The problem with tinkering with this is all time is set on a Desktop Authority server pushing the time source to each client and server as one of the old DCs.  

I'm more curious what would happen if that setting were to stop setting automatically on the clients and if they'd default back to the domains.

Can anybody send me the sequence of changing this without interrupting any communication within the domain?  

Thanks!!
0
Comment
Question by:OCUW
  • 2
  • 2
4 Comments
 
LVL 34

Expert Comment

by:Gary Patterson
ID: 39819571
How does desktop authority push out time settings?
0
 

Author Comment

by:OCUW
ID: 39819586
I have no idea to be honest.  There is a setting labeled "Time Synchronization", and from there the settings include just a server name.  

Upon checking the settings again, it looks to be pointed at the PDC, which is what I would want.  But on my client machine I do a net time and see it looking at the old DC.
0
 
LVL 34

Accepted Solution

by:
Gary Patterson earned 500 total points
ID: 39821030
If your users all have local Admin rights, you could just add a line to their login script:

;Configure time service to sync from the domain hierarchy
w32tm /config /syncfromflags:domhier /update

If they don't all have admin rights, you could use a WMI script to run the command on each workstation in the domain.

But I think the best method is to use Group Policy.  Note that you need to set up one GPO for domain controllers and a different one for domain members:

http://blogs.technet.com/b/nepapfe/archive/2013/03/01/it-s-simple-time-configuration-in-active-directory.aspx

Test it on a small subset, and make sure and test it for each different OS version in your network.

- Gary Patterson
0
 

Author Comment

by:OCUW
ID: 39848071
Seemed to fix the issue.  The remaining DCs had a weird GPO attached labeled as something else, screwing up the connection.  And the PDC seemed to be using the CMOS as a time source.  I slowly crept up the CMOS so it wasn't >5min apart from the DCs, set the DCs by removing the GPO, set up the domheir settings, then went to the PDC and pointed it to the NTP server.  

Took a few minutes to get everything going.

Thanks for the help :)
0

Featured Post

Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

Join & Write a Comment

Suggested Solutions

Online collaboration can help businesses be more efficient, help employees grow their skills and foster a team environment.
When you upgrade from Windows 8 to 8.1 or to Windows 10 or if you are like me you are on the Insider Program you may find yourself with many 450MB recovery partitions.  With a traditional disk that may not be a problem but with relatively smaller SS…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

24 Experts available now in Live!

Get 1:1 Help Now