Task: configure time synchronization in an Active Directory domain based on Windows Server 2008 servers with an external source.
First you need to understand one thing - all servers (even other domain controllers) and computers in the Active Directory domain sync their time from the controller that holds the PDC role. Accordingly, the NTP client needs to be configured on the domain controller holding the PDC role.
Solution
1) If you don't know which controller holds the PDC role, then log in to any domain controller and run at the command line:
C:\> netdom /query fsmo
In response you'll get a list matching roles to who holds them.
2) Log in to the domain controller holding the PDC role;
3) Stop the time service on this controller:
C:\> net stop w32time
4) Configure the external NTP servers for synchronization:
C:\> w32tm /config /syncfromflags:manual /manualpeerlist:"0.pool.ntp.org, 1.pool.ntp.org, 2.pool.ntp.org"
in our example the time service will listen to 0.pool.ntp.org, 1.pool.ntp.org and 2.pool.ntp.org.
5) Set this controller as the reliable time server for all other machines (yes, yes, we still go through this step anyway):
C:\> w32tm /config /reliable:yes
6) Start the time service back up:
C:\> net start w32time
7) Wait some time for synchronization. You can check with the command:
C:\> w32tm /query /configuration
If no miracle happens - check the (System) event log and look at the errors.
Comments