Avatar of JJENSEN3
JJENSEN3
 asked on

Synchronizing Time In a Domain

I have two domain servers (2016) in a virtual environment. I would like to have one server sync to an external time server. I would also like to create a group policy that would force all servers/workstations on the network to sync their time with the primary domain controller. I have read several articles, but through many complicated steps, it doesn't appear to give me   what I perceive to be a simple task.

Can anyone advise on the straight forward steps needed to complete this?

Thanks,
NetworkingActive Directory* time server

Avatar of undefined
Last Comment
CompProbSolv

8/22/2022 - Mon
SOLUTION
Lee W, MVP

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
JJENSEN3

ASKER
That doesn't seem to be happening like you describe. I have workstations with different times as well as servers. When I query the time service on my workstation, it claims the source as "Free-Running System Clock"
Attached is what my DC currently returns on query.Time Query
Lee W, MVP

Is your DNS set properly?  On the workstations and the servers?  Rather than trying to re-invent the wheel, I would start troubleshooting.  Best place to start is the event logs on both the server and a problematic client.  (DNS is the obvious issue, but if that's not it, go to the event logs!)
Lee W, MVP

So when I googled "Free-running system clock" - I got what I cautioned you about - Disable time sync with the hardware.  Reference:
https://blogs.vmware.com/apps/2016/01/completely-disable-time-synchronization-for-your-vm.html
This is the best money I have ever spent. I cannot not tell you how many times these folks have saved my bacon. I learn so much from the contributors.
rwheeler23
Lee W, MVP

Once you have fixed the PDC emulator DC, run W32TM /resync /rediscover on your machine.
ASKER CERTIFIED SOLUTION
CompProbSolv

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
JJENSEN3

ASKER
Thank you for your advice.
I disabled the Hyper-V integration and then re-ran the w32tm command on my DC.

After I ran command "w32tm /config /manualpeerlist:"0.time.windows.com,0x1 1. time.google.com ,0X1" /syncfromflags:manual /reliable:yes /update" on my PDC and then restarted the  win32 service, all domain computers sync'd time with the PDC.

Thanks for the advice!
CompProbSolv

Thanks for the points, but I think they should be split with Lee.  He had the correct answer first, but focused on VMWare and not Hyper-V.  The original post didn't mention which hypervisor was being used.
⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.
JJENSEN3

ASKER
The points were shared, with the majority going to Lee.
CompProbSolv

Thank you....