<div>
Did the DC update and reflects the synced time?<br />
Check for w32tm error messages.<br />
<br />
Run the net time /sync on any workstation, other sustem to seeif it updates its clock and if doesn't it should include info which system it syncs with.<br />
<br />
Go through other DCs and see if they update their clock to the primary DC where the time is now correct.
</div>


<div>
An exapmle<br>w32tm /config /manualpeerlist:0.europe.pool.ntp.org time.windows.com /syncfromflags:manual /reliable:yes /update<br><br>Disable policies, as there is a default mechanism hwo clients sync with their doamin controller.<br>On several DCs, you may have a look at<br><br>[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\w32time<br><br>There are settings to enable / disable the server as well as the client functionality. So either you setup all other DC in the same way or you declare on DC als authorive server and make the other DCs just to work as clients. This is just to avoud, that they sync from different sources.&nbsp;
</div>


<div>
It did not update the time on the DC running the PDC emulator when I ran the command. &nbsp;I checked the event logs on the server and this is the only warning regarding the time server I could find.&nbsp; I also tried to manually change the time on the DC to the correct time and it said this setting is managed by your organization.&nbsp; I'm not sure if that makes a difference.&nbsp;&nbsp;<br><br>Time Provider NtpClient: This machine is configured to use the domain hierarchy to determine its time source, but it is the AD PDC emulator for the domain at the root of the forest, so there is no machine above it in the domain hierarchy to use as a time source. It is recommended that you either configure a reliable time service in the root domain, or manually configure the AD PDC to synchronize with an external time source. Otherwise, this machine will function as the authoritative time source in the domain hierarchy. If an external time source is not configured or used for this computer, you may choose to disable the NtpClient.
</div>


<div>
Usually, the DC with the master role is the one against all other DCs should sync.<br />
The clients can sync against any DC.<br />
<br />
What is the source against which the 2min fast is compared?<br />
Could that source be the one 2 min slow?
</div>


<div>
It is the DC with the master role I'm looking at. &nbsp;<br><br>We started having issues with Teams where messages are being delivered out of sync, I noticed that compared to my cell phone and another users cell phone the time on our systems at work were 2 minutes faster (I use AT&amp;T the other person is on TMobile). &nbsp;The only we reason we can find for this is time being off.&nbsp; We are a manufacturing plant and people that work on the floor get noted if they are late and last week we started getting complaints that the time clocks were fast (they sync through our servers). &nbsp;
</div>


<div>
Have a look into the registry...<br>[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\w32time\Parameters<br>A usual client has set:<br>Type Reg_SZ NT5DS<br><br>A server, which acts as time server with external resources hat<br>Type Reg_SZ NTP<br>NtpServer: servername,serverflag<br>the server, flags pairs are separated by spaces...<br>so i.e ptbtime1.ptb.de,0x9 time.windows.com,0xa<br>where the flags mean<br><br>also under the subkeys "server" and "client"<br>Enabled=1 <br>means the acts as client (for the NTP) and as server (for the domain)<br><br>0x01 SpecialInterval<br>0x02 UseAsFallbackOnly<br>0x04 SymmatricActive &nbsp; <br>0x08 Client<br><br>So in this case, the first is the primary and microsft the fallback.<br><br>If your DCs is not the time server for your domain, any other DC shoudl have the role.&nbsp;<br><br>
</div>


<div>
<br><a href="https://filedb.experts-exchange.com/incoming/2021/05_w22/1561822/parameters.png" rel="ugc"><img src="https://filedb.experts-exchange.com/incoming/2021/05_w22/1561822/parameters.png" class="fr-fic fr-dib"></a>Here are the parameters settings on the DC
</div>


parameters.png

<div>
I use a group policy to keep my dc's in "check". It automatically sets the PDC emulator as the time source and configures its external sources...<br>I believe this is the documentation I used.<br>Also follow its parts about virtualization if you run that way.<br><br><a href="https://theitbros.com/configure-ntp-time-sync-group-policy/" rel="ugc">https://theitbros.com/configure-ntp-time-sync-group-policy/</a><br><br>Also make sure you aren't blocking your DC from reaching its external source with firewalls.
</div>


arnold

<div>
I did try adding in the GPO using the instructions from IT Bros first. &nbsp;When they did not appear to be updating the time that's why I tried the manual synch.
</div>


PDIS

<div>
A little late to the "party". :)<br><br>We run the following on all PDCe servers across all clients whether it is physical or virtual:<br><a href="http://blog.mpecsinc.ca/2014/09/hyper-v-vm-set-up-pdce-ntp-time-server.html" rel="ugc">Set up PDCe NTP Domain Time in a Virtualized Setting</a><br><br>Make sure that the NTP protocol is not being blocked at the firewall or that a GPO hammering the Windows Firewall down to certain protocols has an allow for NTP as well.
</div>


<div>
<div class="content wysiwyg-content fr-view">
All clocks at work appear to be 2 minutes fast. &nbsp;I have tried to configure time sync with an external time source both manually and through gpo and with both methods when I run the command w32tm /resync from the DC with the PDC Emulator role, I get the following error, The computer did not resync because no time data was available. &nbsp;This is the command I ran to try and manually sync with an external source, w32tm /config /syncfromflags:manual /manualpeerlist:"0.us.pool.ntp.org 1.us.pool.ntp.org 2.us.pool.ntp.org 3.us.pool.ntp.org" /update. &nbsp;<br>The command ran successfully, I then stopped and restart the w32tm service. &nbsp;This is a physical DC.&nbsp;&nbsp;
</div>
</div>



All clocks at work appear to be 2 minutes fast.  I have tried to configure time sync with an external time source both manually and through gpo and with both methods when I run the command w32tm /resync from the DC with the PDC Emulator role, I get the following error, The computer did not resync because no time data was available.  This is the command I ran to try and manually sync with an external source, w32tm /config /syncfromflags:manual /manualpeerlist:"0.us.pool.ntp.org 1.us.pool.ntp.org 2.us.pool.ntp.org 3.us.pool.ntp.org" /update.  
The command ran successfully, I then stopped and restart the w32tm service.  This is a physical DC.  

Issue Configuring Time Sync on DC with PDC Emulator role

Windows Server 2016 is the successor to Windows Server 2012 R2. Built upon the same core code as Windows 10, Windows Server 2016 brings enhancements in security, servicing, and connectivity. A particular focus on this release was hybrid-cloud scenarios, and has close ties to Azure and other Microsoft cloud initiatives. This does not detract from the many improvements that are available for on-premises-only deployments

Windows Server 2016 comes in Datacenter, Standard, and Essentials editions, and for servicing, has adopted windows 10's cumulative model. The new nano-server install is designed to be remotely managed and is designed to be kept current through continuous feature updates. The full GUI install operates similarly to windows 10's "Long Term Servicing Branch" (LTSB) model with cumulative security updates.

Windows Server 2016 has also shifted from a per-processor-and-CAL licensing model to a per-core-and CAL licensing model. This brings Windows Server's licensing more in line with Microsoft's other products and makes hybrid-cloud license planning easier as well.

Windows Server 2016

A domain controller is a server that responds to security authentication requests within a computer network domain. It is a network server that is responsible for allowing host access to domain resources. It authenticates users, stores user account information and enforces security policy for a domain

Domain Controller

Windows 10 is a personal computer operating system featuring the "universal application architecture" (UAP); apps can be designed to run across multiple devices with nearly identical code, including PCs, tablets, smartphones, embedded systems, Xbox One, Surface Hub and HoloLens. Windows 10 also includes a virtual desktop system, a window and desktop management feature called Task View, the Microsoft Edge web browser, support for fingerprint and face recognition login, voice-based search (Cortana), new security features for enterprise environments, and DirectX 12 and WDDM 2.0 to improve the operating system's graphics capabilities for games.

Windows 10

Microsoft Azure is a cloud computing platform and infrastructure for building, deploying and managing applications and services through datacenters. It provides both platform-as-a-service (PaaS) and infrastructure-as-a-service (IaaS) services and supports many different programming languages, tools and frameworks, including both Microsoft-specific and third-party software and systems. Cloud Services is a PaaS environment and can be used to create scalable applications and services; there are specific software development kits (SDKs) provided by Microsoft for Python, Java, Node.js and .NET. Azure also has file and storage services, data management, analytics and DNS services.