It looks like the issue came from a GPO. A colleage said he came across the same issue with WinServer 2012 and the GPOs caused it. Since we had only one active GPO we disabled it and the permissions worked.
In this Micro Tutorial viewers will learn how they can get their files copied out from their unbootable system without need to use recovery services. As an example non-bootable Windows 2012R2 installation is used which has boot problems.
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource.
Use Google, Bing, or other preferred search engine to locate trusted NTP …