Tuesday, July 17, 2012

Time settings on Windows machines and Domain Controllers

To check windows time settings use the command below

check config using the command

w32tm /query /configuration
w32tm /dumpreg /subkey:parameters

Recommend to use the following structure for windows time settings with in a Windows Domain.

Set the Domain controller with the PDC emulator to get the time from a reliable NTP source.
for e.g. 1.au.pool.ntp.org
Run the command below to set the settings for the above
w32tm /config /syncfromflags:manual /manualpeerlist:1.au.pool.ntp.org /update

If you cant get to the internet via port UDP 123 from the PDC emulator, then i recommend pointing the ntp server to a router or a esx host or a xenhost or a proxy server. You would need to then set the time source on the proxy to be a reliable source.

FOR Member servers, other DCs and Workstations on the Domain

RUN the commands below as bat if you like

@echo off
w32tm /config /syncfromflags:DOMHIER /update
w32tm /resync
@echo on

You can apply the above bat as a startup policy on workstations.

Have fun.

Hope it helps.