Intune: Set NTP Server

[newpersn]

Hello.

 

Whats the best way of setting a NTP server on our Intune laptops?

 

Some of our laptops have got the wrong time on and would it set though the policy so they are forced to correct themselfs.

 

Thanks

[Davit2005]

Domain joined PCs by default would normally get time from the Domain Controller that holds the PDC Emulator role for their time then the PDC should be configured to look at a reliable time source not it's BIOS.

 

If they are not domain joined then I guess they should be pointed at a reliable time source directly

Edited February 9, 2021 by Davit2005

[Roberto]

I'm working on this right now for a project at work.

 

Currently, AAD-joined devices won't run the windows time service as its set to manual start on domain join, then it gets time from a DC. Not sure how this would work for AD-joined devices that aren't connecting to the mothership via VPN while at home...

 

Anyway, for devices that are managed by Intune and off your local network you need a powershell script to change the trigger to manual start on detection of a network and the get time from an internet NTP server.

 

Luckily, I've written a powershell script you can deliver via Intune to do this, so you don't have to. See https://github.com/robertomoir/MTR-Time-Sync-tools/. It's designed to run in Windows IoT enterprise but should be good on all platforms.

 

You may also need to set the time zone in Intune which needs to be done via oma-uri. See https://www.petervanderwoude.nl/post/configure-time-zones-via-windows-10-mdm/

Edited February 9, 2021 by Roberto