Win12&16 domain control settings NTP server
PDC:
Specify an external time source and synchronize with it, and operate on the administrator command line on the domain controller where the PDC is located (the PDC role (the default authoritative time service source within the domain).
W32tm / config / manualpeerlist: "3.cn.pool.ntp.org 1.cn.pool.ntp.org" / syncfromflags:manual / reliable:yes / update
Net stop w32time & net start w32time
W32tm / resync
W32tm / query / status
/ manualpeerlist represents the list of external time source servers. Multiple servers can be separated by spaces. 210.72.145.44 is the time server ip address of China National time Service Center.
/ syncfromflags:manual means to synchronize with a server in the list of specified external time source servers
/ reliable:yes set up this computer is a reliable source of time. This setting makes sense only for domain controllers.
/ update notifies the time service that the configuration has changed to make the change take effect
In a domain environment, you only need to set the external time source of the root domain controller, and other servers will automatically set time synchronization with the domain controller when they are added to the domain.
Set Group Policy
Set time synchronization for domain members
Open Active Directory users and computers, right-click on the domain, and property. Group Policy, open.
Right-click on "Default Domain Policy" and edit.
Computer configuration-Policy-Administrative templates-system-Windows time Service, double-click Global time configuration, and select enabled.
Modify the MaxNegPhaseCorrection value to 3600 (that is, 3600 seconds, 1 hour)
Modify the MaxPosPhaseCorrection value to 3600 (that is, 3600 seconds, 1 hour)
Modify the value of AnnounceFlags to 5
Click "apply" and "OK".
Computer configuration-Policy-Administrative templates-system-Windows time Service-time provider, enable Windows NTP client, select enabled.
Shut down w32time and restart w32time for the policy to take effect
Net stop w32time & net start w32time
Computer configuration-Policy-Windows Settings-Security Settings-system Services-Windows Time
Set up automatic startup to prevent some ghost systems from being optimized to disable this service.
Client verifies NTP
Configure client and server time synchronization and verify
Update domain policy gpupdate/force on member servers
Time synchronization with NTP servers in the domain and verify the source of NTP synchronization
W32tm / resync
W32tm / query / status
W32tm / query / source
W32tm / query / peers
