Time is off on computers on the domain

I recently took over a client and not too familiar with their setup. They have Server 2016 DC, AD, DHCP, DNS, File and Print. Time on all of the computers in the domain is off. How can i sync everyone's computers with correct network time?
O GChief Technology Officer, Co-FounderAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Dariusz TykaICT Infrastructure Specialist Senior Commented:
You need to check if domain controller is syncing its time with external time source. If not you need to configure that. Then all computers in domain will get proper time from DC. You can read more on this topic here:
https://blogs.technet.microsoft.com/nepapfe/2013/03/01/its-simple-time-configuration-in-active-directory/
0
Dr. KlahnPrincipal Software EngineerCommented:
You pays your money and you takes your choice when it comes to time synchronization across a domain.

CASE A:  If you use a local time server and require all systems to set from that server, then the times will be synchronized but there's no guarantee it will be correct.  This appears to be what you're encountering.  The time must be correct on the time server; if not, everybody has the wrong time and that can be catastrophic in environments where timestamps matter.  And if the time server fails, nobody knows what time it is and the individual system clocks start to drift.

CASE B:  If you use a public time server net such as 0.us.pool.ntp.org, or a high-reliability Stratum 2 server the times on each system will be close to correct but not exactly synchronized.  On the other hand, the network time servers are always available (unless you lose internet connectivity) and are always very close to correct.
0
O GChief Technology Officer, Co-FounderAuthor Commented:
Thank Dariusz and Dr. Klahn for your answers. How can i identify what NTP setup this environment has?
0
IT Pros Agree: AI and Machine Learning Key

We’d all like to think our company’s data is well protected, but when you ask IT professionals they admit the data probably is not as safe as it could be.

Dariusz TykaICT Infrastructure Specialist Senior Commented:
Issue on domain controller below commands and paste results:
w32tm /query /suorce
w32tm /query /peers
0
MichelangeloConsultantCommented:
As per https://blogs.technet.microsoft.com/nepapfe/2013/03/01/its-simple-time-configuration-in-active-directory/

Find PDC emulator: on a Root Domain DC run
netdom query fsmo

Open in new window

   
Run the following command on the PDC emulator:
w32tm /config /manualpeerlist:timeserver /syncfromflags:manual /reliable:yes /update

Open in new window

 (where timeserver is a –space delimited– list of your time source servers)
Once done, restart W32Time service.
   
Run the following command on all other DCs (that are not PDC):
    w32tm /config /syncfromflags:domhier /update

Open in new window

Once done, restart W32Time service.

NOTE: all w32tm commands are to be executed from an elevated command prompt by a Domain Admin of the relevant domain.
0
MichelangeloConsultantCommented:
Posted a quick script here to configure time sync correctly. It has been tested but you are advised to follow my first post so as to pinpoint any error.
Note: in case you get an access error you have to run, from an elevated administrative command prompt, the following code
Net Stop W32time
W32tm.exe /unregister
W32tm.exe /register
Net Start W32time

Open in new window

The above commands re-register the Windows Time Service module; Win32Time.DLL and its sub-components.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
O GChief Technology Officer, Co-FounderAuthor Commented:
Thank you everyone!
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
ntp

From novice to tech pro — start learning today.