Time is off on computers on the domain

I recently took over a client and not too familiar with their setup. They have Server 2016 DC, AD, DHCP, DNS, File and Print. Time on all of the computers in the domain is off. How can i sync everyone's computers with correct network time?
O GChief Technology Officer, Co-FounderAsked:
Who is Participating?
 
MichelangeloConsultantCommented:
Posted a quick script here to configure time sync correctly. It has been tested but you are advised to follow my first post so as to pinpoint any error.
Note: in case you get an access error you have to run, from an elevated administrative command prompt, the following code
Net Stop W32time
W32tm.exe /unregister
W32tm.exe /register
Net Start W32time

Open in new window

The above commands re-register the Windows Time Service module; Win32Time.DLL and its sub-components.
0
 
Dariusz TykaICT Infrastructure Specialist Senior Commented:
You need to check if domain controller is syncing its time with external time source. If not you need to configure that. Then all computers in domain will get proper time from DC. You can read more on this topic here:
https://blogs.technet.microsoft.com/nepapfe/2013/03/01/its-simple-time-configuration-in-active-directory/
0
 
Dr. KlahnPrincipal Software EngineerCommented:
You pays your money and you takes your choice when it comes to time synchronization across a domain.

CASE A:  If you use a local time server and require all systems to set from that server, then the times will be synchronized but there's no guarantee it will be correct.  This appears to be what you're encountering.  The time must be correct on the time server; if not, everybody has the wrong time and that can be catastrophic in environments where timestamps matter.  And if the time server fails, nobody knows what time it is and the individual system clocks start to drift.

CASE B:  If you use a public time server net such as 0.us.pool.ntp.org, or a high-reliability Stratum 2 server the times on each system will be close to correct but not exactly synchronized.  On the other hand, the network time servers are always available (unless you lose internet connectivity) and are always very close to correct.
0
Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

 
O GChief Technology Officer, Co-FounderAuthor Commented:
Thank Dariusz and Dr. Klahn for your answers. How can i identify what NTP setup this environment has?
0
 
Dariusz TykaICT Infrastructure Specialist Senior Commented:
Issue on domain controller below commands and paste results:
w32tm /query /suorce
w32tm /query /peers
0
 
MichelangeloConsultantCommented:
As per https://blogs.technet.microsoft.com/nepapfe/2013/03/01/its-simple-time-configuration-in-active-directory/

Find PDC emulator: on a Root Domain DC run
netdom query fsmo

Open in new window

   
Run the following command on the PDC emulator:
w32tm /config /manualpeerlist:timeserver /syncfromflags:manual /reliable:yes /update

Open in new window

 (where timeserver is a –space delimited– list of your time source servers)
Once done, restart W32Time service.
   
Run the following command on all other DCs (that are not PDC):
    w32tm /config /syncfromflags:domhier /update

Open in new window

Once done, restart W32Time service.

NOTE: all w32tm commands are to be executed from an elevated command prompt by a Domain Admin of the relevant domain.
0
 
O GChief Technology Officer, Co-FounderAuthor Commented:
Thank you everyone!
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.