• Some users have recently had their accounts hijacked. It seems that the now defunct EVGA forums might have compromised your password there and seems many are using the same PW here. We would suggest you UPDATE YOUR PASSWORD and TURN ON 2FA for your account here to further secure it. None of the compromised accounts had 2FA turned on.
    Once you have enabled 2FA, your account will be updated soon to show a badge, letting other members know that you use 2FA to protect your account. This should be beneficial for everyone that uses FSFT.

Windows 2003 Server, 3 DCs and NTP

K

Karandras

[H]ard|Gawd
2FA
Joined
Feb 16, 2001
Messages
1,873
Hey,

Question here, can I have three domain controllers but have DC3 be the primary NTP server so the PDC and DC2 requests it's time from DC3? if that's possible, how can I go about doing it?

Thanks.
 
http://technet.microsoft.com/en-us/library/cc784553(WS.10).aspx
Should be able to do this and substitute the external IP for the IP of your NTP server.

To synchronize the domain controller with an external time source
1.Click Start, and then click Command Prompt.


2.In the Command Prompt window, type the following line, where peers is a comma-separated list of IP addresses of the appropriate time sources, and press ENTER:

w32tm /config /manualpeerlist: peers /syncfromflags:MANUAL

The time sources you choose depend on your time zone. For example, if your domain controller is located in the Pacific Time zone, this line might read:

w32tm /config /manualpeerlist:131.107.1.10 /syncfromflags:MANUAL

In this example, the IP address of the timeserver is used instead of the fully qualified domain name for security purposes.


3.Press ENTER. You should get a message that the command completed successfully.


4.Type w32tm /config /update


5.Press ENTER. You should get a message that the command completed successfully.

W32time uses a variable poll interval based on the quality of timesync with the server. On DCs, this interval defaults to between 64 and 1024 seconds.


6.To immediately synchronize with the external time server, type w32tm /resync and press ENTER. You should get a message that the command completed successfully.


7.Type Exit and press ENTER.
 
This is how I run my domain, and is the recommendation. You have one sync with the internet, and the rest sync with it. It ensures that the time is the most in sync between them. You are changing your time method from domain time to NTP time on the one server. Microsoft has articles that you can check this guys steps against.
 
SRT8 said:
This is how I run my domain, and is the recommendation. You have one sync with the internet, and the rest sync with it. It ensures that the time is the most in sync between them. You are changing your time method from domain time to NTP time on the one server. Microsoft has articles that you can check this guys steps against.
Click to expand...

This is how I do it as well. Make sure you set the DC that runs the PDC to sync from outside the domain. Then you only have to change the settings on that server. Make sure to use the flag /reliable:YES. Once that's done, the rest of the domain will automatically sync from the DC, and the DC will sync to whatever NTP time source you set it to.

Here is what to run on the DC from an Elevated cmd prompt. The IP is for an NTP server in los angeles.
w32tm /config /manualpeerlist:64.147.116.229 /syncfromflags:MANUAL /reliable:YES
w32tm /resync /force
 
You must log in or register to reply here.
Back
Top