Time Server on Windows 2008 R2
Hi all,
I've an active directory domain with 10 sites connect ina a large WAN. Each site as its own domain controller. I wish that the DC of each site act like a reliable time source for the client of that site and that DC will syncronize with an external NTP server.
How can I do this?
September 13th, 2011 7:03am
I hope you have checked
this article.
Thanks
Free Windows Admin Tool Kit Click here and download it now
September 13th, 2011 7:20am
Hello,
I'd prefer that domain clients sync time with the PDC Emulator and that you configure the PDC to sync time with a reliable NTP server.
To configure an NTP server: http://support.microsoft.com/kb/816042
To configure an NTP client: http://www.ehow.com/how_5981545_configure-windows-ntp-client.html
This
posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Microsoft Student
Partner 2010 / 2011
Microsoft Certified Professional
Microsoft Certified Systems Administrator:
Security
Microsoft Certified Systems Engineer:
Security
Microsoft Certified Technology Specialist:
Windows Server 2008 Active Directory, Configuration
Microsoft Certified Technology Specialist:
Windows Server 2008 Network Infrastructure, Configuration
Microsoft Certified Technology Specialist:
Windows Server 2008 Applications Infrastructure, Configuration
Microsoft Certified Technology Specialist:
Windows 7, Configuring
Microsoft Certified IT Professional: Enterprise
Administrator
Microsoft Certified IT Professional: Server Administrator
September 13th, 2011 7:21am
By default in a domain environment, clients synch their time with the server that holds the PDC emulator FSMO.
http://technet.microsoft.com/en-us/library/cc786897(WS.10).aspx
If you would like to chage that, you will hav to reconfuge each client to use a reliable timesource.
i would recommend configureing the local "reliable timesources" to fetch time from a central server to keep time synchronised over the entire domain (important for kerberos!)
to configure the w32tm service, check these articles:
http://technet.microsoft.com/nl-nl/library/cc773061(WS.10).aspx (general info on tim in domain)
http://technet.microsoft.com/nl-nl/library/cc773263(WS.10).aspx (w32 tm utiity and registry settings that apply)
In fact I would recommend reading through the w32tm documentation provided and carefully reconsider whether you need the changes you propose. After all, the default configuration has it's advantages and is very easy to implement!MCP/MCSA/MCTS/MCITP
Free Windows Admin Tool Kit Click here and download it now
September 13th, 2011 7:25am
The best way out would be Configure your pdc emulator to synch the time from the external NTP and that time will be carried forward to all the server with in the domain
Also remember that time server follows hierarchy
http://technet.microsoft.com/en-us/library/cc773013%28WS.10%29.aspx#w2k3tr_times_how_rrfo
here is the best documentation provided by MShttp://www.virmansec.com/blogs/skhairuddin
September 13th, 2011 7:55am
Hi all,
I've an active directory domain with 10 sites connect ina a large WAN. Each site as its own domain controller. I wish that the DC of each site act like a reliable time source for the client of that site and that DC will syncronize with an external NTP server.
How can I do this?
Hello,
this is NOT possible.
In a domain the time source is the DC having the PDCEmulator FSMO, all other DCs sync with that one and the workstations use an available DC, that way it is achieved that all machines are using the same time. Normally the DC that is used for authentication
will also be used to sync the time, in your case the site DC.
http://msmvps.com/blogs/mweber/archive/2010/06/27/time-configuration-in-a-windows-domain.aspxBest regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Free Windows Admin Tool Kit Click here and download it now
September 13th, 2011 3:50pm


