Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 60
  • Last Modified:

Time synchronization for Domain Controllers

Hello,

I am experiencing an issue where all the clocks on our domain controllers become out of sync. We currently have 8 DCs on our network and for some reason, the clocks become out of sync, causing anomalies on our network (exchange in particular).

Is there a reason this may be happening and is there a fix for this? Perhaps a way to connect to an external clock?

Thanks in advance
0
zito2000
Asked:
zito2000
4 Solutions
 
Dustin SaundersDirector of OperationsCommented:
I've always used the pool.ntp servers for our TIme service.  This link shows how to set them as your NTP server.
0
 
Todd NelsonSystems EngineerCommented:
If you have not configured an authoritative time server for your domain then each of the servers will attempt to set their time from Microsoft--which isn't always a reliable source.

When you configure an authoritative time server, you want to configure the PDC emulator to access a reliable external time service (http://www.pool.ntp.org/en/) from which it will set its time.  Then all other internal servers should get their time from the PDC emulator.

Utilize these two references to configure time synching for your Windows domain.

How to configure an authoritative time server in Windows Server ... https://support.microsoft.com/en-us/kb/816042

Configure a client computer for automatic domain time synchronization ... https://technet.microsoft.com/en-us/library/cc758905%28WS.10%29.aspx?f=255&MSPPError=-2147217396

Good luck.
0
 
frankhelkCommented:
Hmmm ... W32time, the timekeeping service in Windows. I experienced enough trouble with that piece of crap when in NTP mode to avoid using it whenever I can.

For a mature timekeeping service with well documented behaviour, I'd recommend this:

Use a Windows port of the classic *ix NTP service on your DCs, and sync 'em with NTP time sources from pool.ntp.org. Sync the clients with your DCs to keep 'em in sync in case of network failure. Ensure to disable the time sync features of VMware (to timekeeping services on one clock will cause time chaos). The NTP service software is free. Easy to install and configure, works like a charm and is stable as a rock. And it is nicer when it comes to one of the rare cases of troubleshooting.

See my article on NTP basics for the "How To".

The NTP service has a low ressource footprint, therefore the NTP functionality could be hooked onto existing machines or VM's like webservers, ftp servers, mailservers or database hosts - even in a DMZ - without visible performance impact.

If securtity is an issue, you might as well use local radio controlled clock appliances (see the article for that, too) in your LAN who serve times very reliable and precise.
0
Get 10% Off Your First Squarespace Website

Ready to showcase your work, publish content or promote your business online? With Squarespace’s award-winning templates and 24/7 customer service, getting started is simple. Head to Squarespace.com and use offer code ‘EXPERTS’ to get 10% off your first purchase.

 
zito2000Author Commented:
Thank you everyone for the help.

I prefer synchronizing with an external so I will try that solution first.

If no luck, I will explore other avenues to achieve the synchronization.

thank you
0
 
zito2000Author Commented:
I forgot to ask,

Dustin, do I need to do this for every DC, or just the roots?
0
 
Dustin SaundersDirector of OperationsCommented:
Microsoft states that it only needs to be done on the PDC that is the operations master.
0
 
zito2000Author Commented:
Ok cool,

that would be one of our roots
0
 
Dustin SaundersDirector of OperationsCommented:
@Zito2000

When a question is resolved, simply select an answer(s) that most helped you lead to your resolution.  The question will be closed and points will be awarded to the expert(s) who helped you.
1
 
Dustin SaundersDirector of OperationsCommented:
All three experts helped asker reach desired solution with good answers.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

What Kind of Coding Program is Right for You?

There are many ways to learn to code these days. From coding bootcamps like Flatiron School to online courses to totally free beginner resources. The best way to learn to code depends on many factors, but the most important one is you. See what course is best for you.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now