Thursday, October 25, 2012

External NTP sync for Domain Controllers

Long time, no see.

One more for the road :-)

This is to be done on the PDC emulator, usually your 1st DC.

1. Set registry values 

HKLM\SYSTEM\CurrentControlSet\Services\W32Time\Parameters\NtpServer [STRING] = "1st.fqdn.or.ip,0x1 2nd.fqdn.or.ip,0x1"
(space separated string, with ',0x1' after each entry) 

HKLM\SYSTEM\CurrentControlSet\Services\W32Time\Parameters\ReliableTimeSource [DWORD] = 1
(if this doesn't exist, don't create it) 

HKLM\SYSTEM\CurrentControlSet\Services\W32Time\Parameters\LocalNTP [DWORD] = 0
(if this doesn't exist, don't create it) 

HKLM\SYSTEM\CurrentControlSet\Services\W32Time\Config\AnnounceFlags [DWORD] = 5

2. Restart w32time

net stop w32time && net start w32time

3. Resync the time service

w32tm /resync /rediscover

4. Verify sync

w32tm /query /status

[ trackback ]