FSMO role - PDC Emulator - time source

Hi All,
im going to move my fsmo roles to a new server (schema/domain/rid/infrastructure/pdc)  - one thing i have read in addition to moving the fsmo roles i need to consider the "time source" for the pdc emulator?   how is this done? are these links ok: https://support.microsoft.com/en-us/kb/816042 
http://binarynature.blogspot.co.uk/2012/04/configure-active-directory.html

Am i supposed to use internal hardware clock or external time source??
jag bAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

ChrisCommented:
Decide on your timesource first (ntp.pool.org is a well used one which I will use as an example).

Once you have your timesource decided, run the following command on the PDC Emulator, replacing ntp.pool.org with your chosen ntp server:

w32tm /config /update /manualpeerlist:ntp.pool.org /syncfromflags:MANUAL /reliable:YES

You should then be able to run w32tm /resync and see your servers clock become in sync with the NTP server. This will happen periodically automatically. All your clients will in turn sync their time with the PDC Emulator.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
jag bAuthor Commented:
im based in the UK - so was going to run below ? what do you think?

 w32tm.exe /config /manualpeerlist:"0.uk.pool.ntp.org 1.uk.pool.ntp.org 2.uk.pool.ntp.org 3.uk.pool.ntp.org" /syncfromflags:manual /reliable:YES /update

 w32tm.exe /config /update

 Restart-Service w32time

Whats your thoughts on above?
0
ChrisCommented:
Yup, that'll work. You don't need to bother with the second command as you're already running /update in the first command.
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

ChrisCommented:
Actually, reread it. The command should actually be:

w32tm.exe /config /manualpeerlist:0.uk.pool.ntp.org,1.uk.pool.ntp.org,2.uk.pool.ntp.org,3.uk.pool.ntp.org /syncfromflags:manual /reliable:YES /update
0
Will SzymkowskiSenior Solution ArchitectCommented:
The 2 links that i always reference are below. The first one tells you how to do it, and the second one provides a great illustration of how it all connects together.

https://technet.microsoft.com/en-us/library/cc786897%28v=ws.10%29.aspx

http://blogs.technet.com/b/nepapfe/archive/2013/03/01/it-s-simple-time-configuration-in-active-directory.aspx

WIll.
0
jag bAuthor Commented:
then i have run below on the DC that previously had the PDC Emulator: - is that ok or not needed?

 w32tm.exe /config /syncfromflags:Domhier /reliable:NO /update
 w32tm.exe /config /update
0
ChrisCommented:
Only needed if you previously had ntp syncing setup on it.

You should be able to tell by running w32tm /query /configuration.
0
jag bAuthor Commented:
when i run w32tm /query /configuration on my old DC it come back with NTPServer: local and Type: NT5DS

so will i need to do anything on the old DC that had PDC - it was using the internal windows time
0
ChrisCommented:
If NTP server is set to local then it wasn't syncing with an external time source. Nothing to do there, just setup the new role holder as above.
0
jag bAuthor Commented:
last thing on this - i know when servers are setup the DC has the internal NTP set to local - should this be external or does it not matter?  Reason is my live environment has 1 DC with all fsmo roles and this is still set to internal NTP time source..
0
ChrisCommented:
Sorry, I'm not entirely sure what you're asking.

It sounds to me like your existing server is currently running with the default settings which essentially just means internal clock based time. As your entire domain will sync time with the PDC emulator it really is a good idea to ensure you have time sync set up on it.

You could either setup a time source on your current server now, then when you move the fmso roles, set it up again on the new server, or you could just wait for the time being and start from scratch with the new server. It really depends on how long it's going to take you to provision the new server.

I wouldn't worry too much about the config of the old PDC emulator once you've setup the time sync on the new one. If it's still setup to sync with pool.org it will end up at the same time as the rest of the domain anyway, if it isn't setup to sync with pool.org then it will get it's time from the new PDC emulator and, again, end up with the same time being set.
0
jag bAuthor Commented:
Chris - it's currently setup as internal clock based time so might aswl wait until I setup my new DC. But what I was asking is for example i have 1 DC if I was not going to add another DC so fsmo roles are not moved  - Should I change the default internal clock to external time as best practice?
0
Will SzymkowskiSenior Solution ArchitectCommented:
Have you looked at either of my links that i posted? They outline exactly what needs to be done to configure external time source on your PDC.

Will.
0
jag bAuthor Commented:
Will yes I have I just asked as best practice
0
ChrisCommented:
it doesn't matter if you have one DC or 1000, I would always recommend that the PDC emulator has an external time source as it's the basis for time for the entire domain. If it's time is wrong, all your servers and clients time is wrong.

Short answer: Yes I would setup external time if I just had the one server.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.