Query on time changing for domain joined pcs

Question

Hi guys, have a customer environment with 5 servers all virtualised , with maybe 150 client pcs (very small)

Servers are Windows 2019 and clients are all Windows10

Since the time change in Ireland a few months ago they have noticed the time change on client pcs

DC is virtualised, whats best GPO to run here or is there another action I can do

Thanks in advance

Answer 1

See what time the domain thinks it is:

Net time /Domain:domain.name.fqdn
I found this command useful as it was reported that three computers were all set at different times. I used the domain command and the following command to query all four devices for their time nearly simultaneously.

See what time each computer says it is:

Net time \computer-name
After running the above commands, I found that one of the computers was about a minute and a half ahead of the others which were correctly pulling the domain time. It’s not enough of a difference to cause issues with Kerberos authentications but the computer is part of a fail-over system with logs that would have a hard time syncing up alarms with different timestamps.

See where the computer is pulling its time from:

W32tm /query /source
After running the above command, it returned an IP address that meant nothing to me. It was pulling its time from some other server and that was the source of the problem.

You can ask Windows for its Windows Time configuration. It’s not very informative if everything is working properly but gives you something to compare to a working computer.

Hope this information can help you
Best wishes
Vicky

Answer 2

Something here may help.
https://learn.microsoft.com/en-us/windows-server/networking/windows-time-service/windows-time-service-tools-and-settings#using-group-policy-to-configure-the-windows-time-service

--please don't forget to Accept as answer if the reply is helpful--

Answer 3

What issues are you having? Some general info

• All domain members should use NT5DS domain time.
• Desktops and member servers sync with any domain controller.
• Domain controllers sync with PDC emulator (one per domain)
• PDC emulator in child domain can sync with any domain controller in parent domain.
• PDC emulator in parent domain syncs with either a hardware clock or possibly an external source.
  https://blogs.technet.microsoft.com/nepapfe/2013/03/01/its-simple-time-configuration-in-active-directory/

--please don't forget to Accept as answer if the reply is helpful--

Answer 4

On the problem member you can;

w32tm /unregister
net stop w32time
w32tm /register
net start w32time
w32tm /config /syncfromflags:domhier /update
net stop w32time
net start w32time
then check
w32tm /query /source
w32tm /query /configuration

--please don't forget to Accept as answer if the reply is helpful--