↓
 
Home→Windows→Set Windows Domain Controllers To Sync To An External Time Source

Set Windows Domain Controllers To Sync To An External Time Source

Software Effect Enterprises, Inc Posted on by

The domain controller of a domain should be set to a reliable time source. All machines in the domain will get the current time from the domain controller. To correct this:

  1. Determine which machine is the PDC with the command: netdom query fsmo
  2. Log in to the PDC Server and open the command prompt.
  3. Stop the W32Time service: C:>net stop w32time
  4. Configure the external time sources, type: C:> w32tm /config /syncfromflags:manual /manualpeerlist:”0.pool.ntp.org,1.pool.ntp.org,2.pool.ntp.org”
  5. Make the PDC a reliable time source for the clients. Type: C:>w32tm /config /reliable:yes
  6. Start the w32time service: C:>net start w32time
  7. The windows time service should begin synchronizing the time. You can check the external NTP servers in the time configuration by typing: C:>w32tm /query /configuration    (for windows 2003, XP or older use Net time /querysntp
  8. Check the Event Viewer for any errors.
  9. Verify inside of services that the Windows Time Service is set to start automatically or automatic/delayed. If set to manual or disabled, set to automatic.

For machines that are not in a domain, repeat steps 3-9, but skip step 5

Machines with incorrect times will have problems with authentication

Additional notes:

http://technet.microsoft.com/en-us/library/cc773263%28v=WS.10%29.aspx

Example on a Windows 2016 domain controller

Microsoft Windows [Version 10.0.14393]
(c) 2016 Microsoft Corporation. All rights reserved.

C:\Windows\system32>net stop w32time
The Windows Time service is stopping.
The Windows Time service was stopped successfully.


C:\Windows\system32>w32tm /config /syncfromflags:manual /manualpeerlist:"0.pool.ntp.org,1.pool.ntp.org,2.pool.ntp.org"
The command completed successfully.

C:\Windows\system32>w32tm /config /reliable:yes
The command completed successfully.

C:\Windows\system32>net start w32time
The Windows Time service is starting.
The Windows Time service was started successfully.

 

Windows 2000 W32Time service

Configuration parameters for the W32Time service are now stored in the registry (since at least Windows 2000, Service Pack 4, and perhaps earlier). You can change the settings either via the command line or by editing the registry directly. Either way, you must be logged on as the Administrator to change the time source.

Windows uses a simplified version of the Network Time Protocol (NTP), which is called SNTP, so you will notice references to both NTP and SNTP here and in the Microsoft documentation.

Command Line

To give commands to Windows on the command line you can either use the mouse to pull down Start -> Programs -> Accessories -> Command Prompt, or you can select Start -> Run… and enter “command” as the file to open. Remember, you must be the Administrator.

To see the current time server setting give the command

 net time /querysntp

To set the time server give a command like

 net time /setsntp:time.apple.com

Once you change the server you should restart the time service with the command

 net stop w32time && net start w32time

This information was extracted from Microsoft Support Knowledge Base article 216734: “ How to configure an authoritative time server in Windows 2000

Comments are closed.

↑