servers not syncing time with PDC

[RabbieBurns]

Ive got the PDC to sync time with uk.pool.ntp.org. It seems to be keeping its time correctly.

 

However all the other domain controllers and member servers are about 15 minutes behind, and have the exact same time.

 

What am I forgetting?

[SYNACK]

Depending on the age of the OS it may be timeshifting the other servers slowly (time moves faster on them till it catches up) so that kerberos does noy break.

 

Also look at w32tm and see what the other servers are doing with ( w32tm /query /configuration ) + do a /rediscover /resync on them:

Windows Time Service

Configure Windows Server 2003 and 2008 w32tm commands on domain controller - 1st Byte Solutions

[RabbieBurns]

2 physical 2008r2 Datacenter boxes and the rest are 2008R2 Enterprise Guest VMs (hyperv) with one Core edition a DC

 

They all look like this:

[SYNACK]

Have you turned off the VM environment time sync (integration features) which messes with this horribly. If this still happens afterwards you sould run a rediscover resync again and if that does not set it right you may need to point the servers at the PDC emulator timekeeper with w32tm or GPO.

[RabbieBurns]

Nope not turned off VM environment sync Ill have a look for that, cheers

[Michael]

Here's how I setup Time Servers in 2008 R2.

 

Optionally, you can also check out options 004 and 042 in DHCP Server.

[ChrisH]

I blogged about this recently as well there are a few commands in my blog to check your clients config and the NTP client type.

[RabbieBurns]

servers been holding their time now for 2+ weeks thanks for all help