asked on 3/19/2019

Synchronizing Time In a Domain

I have two domain servers (2016) in a virtual environment. I would like to have one server sync to an external time server. I would also like to create a group policy that would force all servers/workstations on the network to sync their time with the primary domain controller. I have read several articles, but through many complicated steps, it doesn't appear to give me what I perceive to be a simple task.

Can anyone advise on the straight forward steps needed to complete this?

Thanks,

Networking Active Directory * time server

Last Comment

CompProbSolv

3/19/2019

SOLUTION

Lee W, MVP

3/19/2019

THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.

View this solution by signing up for a free trial.

Members can start a 7-Day free trial and enjoy unlimited access to the platform.

See Pricing Options

Start Free Trial

JJENSEN3

3/19/2019

ASKER

That doesn't seem to be happening like you describe. I have workstations with different times as well as servers. When I query the time service on my workstation, it claims the source as "Free-Running System Clock"
Attached is what my DC currently returns on query.

Lee W, MVP

3/19/2019

Is your DNS set properly? On the workstations and the servers? Rather than trying to re-invent the wheel, I would start troubleshooting. Best place to start is the event logs on both the server and a problematic client. (DNS is the obvious issue, but if that's not it, go to the event logs!)

Lee W, MVP

3/19/2019

So when I googled "Free-running system clock" - I got what I cautioned you about - Disable time sync with the hardware. Reference:
https://blogs.vmware.com/apps/2016/01/completely-disable-time-synchronization-for-your-vm.html

Lee W, MVP

3/19/2019

Once you have fixed the PDC emulator DC, run W32TM /resync /rediscover on your machine.

ASKER CERTIFIED SOLUTION

CompProbSolv

3/19/2019

THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.

View this solution by signing up for a free trial.

Members can start a 7-Day free trial and enjoy unlimited access to the platform.

See Pricing Options

Start Free Trial

JJENSEN3

3/19/2019

ASKER

Thank you for your advice.
I disabled the Hyper-V integration and then re-ran the w32tm command on my DC.

After I ran command "w32tm /config /manualpeerlist:"0.time.windows.com,0x1 1. time.google.com ,0X1" /syncfromflags:manual /reliable:yes /update" on my PDC and then restarted the win32 service, all domain computers sync'd time with the PDC.

Thanks for the advice!

CompProbSolv

3/19/2019

Thanks for the points, but I think they should be split with Lee. He had the correct answer first, but focused on VMWare and not Hyper-V. The original post didn't mention which hypervisor was being used.

JJENSEN3

3/19/2019

ASKER

The points were shared, with the majority going to Lee.

CompProbSolv

3/19/2019

Thank you....