Start a discussion

25 views
4 replies

3. Synchronize the old Windows Server Essentials 2016 time with an external time source

Are these time server settings ok on my existing Hyper-V virtualized domain controller?Time synchronization is unchecked for the domain controller in Hyper-V manager Integration services (see attachment)

PS C:\Windows\system32> w32tm /query /source
1.us.pool.ntp.org,0x1
PS C:\Windows\system32> w32tm /query /source
1.us.pool.ntp.org,0x1
PS C:\Windows\system32> ping 1.us.pool.ntp.org

Pinging 1.us.pool.ntp.org [74.6.168.72] with 32 bytes of data:
Reply from 74.6.168.72: bytes=32 time=110ms TTL=43
Reply from 74.6.168.72: bytes=32 time=110ms TTL=43
Reply from 74.6.168.72: bytes=32 time=113ms TTL=43
Reply from 74.6.168.72: bytes=32 time=108ms TTL=43

Ping statistics for 74.6.168.72:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 108ms, Maximum = 113ms, Average = 110ms

Attached Files
Sam Thorpe Sam Thorpe
Published 10/02/2024 00:10
Add Comment
Mariette Knap

Hello Sam,

This may help also Recommendation to Configure the Root PDC with an Authoritative Time Source and Avoid Widespread Time Skew. The Group Policy in that article makes sure that any PDC (so also if you migrate) get the correct time settings. This is a 'set and forget' solution I always implement.

If you launch a browser and go to https://time.is you can see if time settings are correct.

replied 10/02/2024 09:31
Sam Thorpe

Mariette,

I configured the GPO and it appears to be working correctly:

PS C:\Windows\system32> gpupdate

Updating policy...

Computer Policy update has completed successfully.

User Policy update has completed successfully.

PS C:\Windows\system32> w32tm /query /source

1.us.pool.ntp.org,0x1

PS C:\Windows\system32> gpresult /r

Microsoft (R) Windows (R) Operating System Group Policy Result tool v2.0

© 2016 Microsoft Corporation. All rights reserved.

Created on 10/2/2024 at 6:59:31 PM

RSOP data for CCCI\             on CCCISERVER : Logging Mode

--------------------------------------------------------

OS Configuration:            Primary Domain Controller

OS Version:                  10.0.14393

Site Name:                   Default-First-Site-Name

Roaming Profile:             N/A

Local Profile:               C:\Users\

Connected over a slow link?: No

COMPUTER SETTINGS

------------------

    CN=CCCISERVER,OU=Domain Controllers,DC=ccci,DC=local

    Last time Group Policy was applied: 10/2/2024 at 6:57:45 PM

    Group Policy was applied from:      CCCIserver.ccci.local

    Group Policy slow link threshold:   500 kbps

    Domain Name:                        CCCI

    Domain Type:                        Windows 2008 or later

    Applied Group Policy Objects

    -----------------------------

        Default Domain Controllers Policy

        Force time synchronization from external time servers

        Default Domain Policy

replied 10/02/2024 23:13
Sam Thorpe

Force time synchronization from external time servers GPO is working but I notice that if I restart the Windows Time Service settings revert to Local CMOS Clock until I do another gpupdate/force. Is this ok and normal?  See below:

C:\Windows\system32>w32tm /query /source
2.us.pool.ntp.org,0x1

RESTARTED WIndows TIME Service

C:\Windows\system32>w32tm /query /source
Local CMOS Clock

C:\Windows\system32>gpupdate/force
Updating policy...

Computer Policy update has completed successfully.
User Policy update has completed successfully.

C:\Windows\system32>w32tm /query /source
3.us.pool.ntp.org,0x1

 

replied 10/03/2024 19:24
Mariette Knap

The Windows Time Service does not need to be restarted. The GPO is applied every 15 minutes.

replied 10/05/2024 17:17
Last Activity 10/05/2024 17:17