Domain Controller Time Sync Ntp
The pdc emulator of the root domain in a forest should synchronize with an external time server which could be a router another standalone server an internet time server etc.
Domain controller time sync ntp. Typically the ntpd daemon read its configuration from the etc ntpd conf file. Because there should be only one time authority on the network which in turn should be synchronized with a reliable ntp server. The following is a minimum conf file that synchronises the time with the samba active directory ad domain controllers dc dc1 and dc2 and does not provide time services for other hosts. Set up your virtual hosts and or primary domain controller to sync with an outside ntp server and then set any other dc s to refer to the primary dc only.
Ntp is implemented via udp over port 123 and can operate in broadcast and multicast modes or by direct queries. Pdc synchronizes time with itself by default or you can configure it to synchronize with an external time source on the internet ntp server. In edit value type ntp in the value data box and then select ok. All dcs synchronize time with a domain controller pdc role holder.
Microsoft easy fix solution microsoft provides an easy fix solution that automatically configure external ntp time server sources that you specified by replacing the placeholder names of server1 and server2 with the name of your ntp server followed by 0x1. Locate and then click the following registry subkey. Multiple ntp servers must be space delimited for example 131 107 13 100 0x8 24 56 178 140 0x8 open an administrative command prompt and execute the following command. Network time protocol ntp is the default time synchronization protocol used by the windows time service wts in windows servers and workstations.
You can configure time synchronization on the pdc manually or using a gpo. Hkey local machine system currentcontrolset services w32time parameters type in the pane on the right right click type and then select modify. Active directory time synchronization architecture. Modify the ntpserver value to contain the ntp server to synchronize time with followed by 0x8 for example 131 107 13 100 0x8.
The pdc emulator of a domain should synchronize with any domain controller of the parent domain.