Domain-wide Time Synchronization: Part 2

Ok, sorry for the delay, but I want to dive right in. Let’s break down the steps from part 1:

1 – Configure NTP time source for PDC domain contoller

For this step, you want to configure the PDC to check in with a reliable Internet time server. A couple of ones that I prefer to use are hosted by the US Naval Observatory (tock.usno.navy.mil) and NIST (time.nist.gov). To configure the necessary settings, you’ll need to make a bunch of registry changes, which you can find here. But, since I’m always looking for an easier way, I found this handy utility that will make the necessary changes for you, after entering a few settings. The only gotcha that I found with this utility was that you need to enter a space before the name of your preferred NTP server; otherwise, the registry doesn’t get updated correctly. Check the event logs afterward to verify that everything worked ok.

2 – Configure poll interval on member servers (15 minutes; my preference)

On each member server, I change the “poll interval” on domain controllers and member servers to 15 minutes (900 seconds)

Edit the following registry value:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\NtpClient\SpecialPollInterval = "900" (DWORD)

3 – Ensure that all member servers and workstations are configured for the NTP time source type of “NT5DS”

From command prompt:

w32tm /dumpreg /subkey:Parameters

4 – Test and verify time sync

Verify NTP servers:

Net time /querysntp

Compare time difference on PDC to other machines:

w32tm /stripchart /computer:[computer name] /samples:1

For more info, check out the following: