NTP Server

Question

Which NTP server Windows server automatically use for their time synchronization. Is it time. windows.com.?

I have read that the domain controller is the default NTP server for all member servers. Is that correct.?

I would like to know what is the best way to configure NTP for servers in a production environment.?

Answer 1

Hello,

Try below commands:

w32tm /query /status

w32tm /query /source 

Best regards,

Molly

Answer 2

Hello,

For domain controllers, by default it is configured to synchronize with NTP servers time.windows.com, which is a default option provided by Microsoft.

For stand-alone computers, they typically synchronize their time using the Windows Time service (W32Time). By default, stand-alone computers are configured to synchronize with an internet-based time server, such as time.windows.com.

Best regards,

Molly

Answer 3

What is the process to verify the domain controller is synchronize its time with windows NTP server.

Is there any command we can use to display the NTP server that the DC is connected to.?

Answer 4

Thanks Molly.

When I run those commands on my domain controller and member servers, I get the output below. I am running Amazon EC2 Windows instances. I learned that by default, all EC2 instances will synchronize their time with the Local Amazon Time Sync Service via NTP.

That means even if the server is linked to a domain controller, these configurations won't change.? Because I get the same output on DC and member servers

PS C:\Windows\system32> w32tm /query /status

Leap Indicator: 0(no warning)

Stratum: 4 (secondary reference - syncd by (S)NTP)

Precision: -23 (119.209ns per tick)

Root Delay: 0.0004258s

Root Dispersion: 0.0212100s

ReferenceId: 0xA9FEA97B (source IP: 169.254.169.123)

Last Successful Sync Time: 10/1/2024 9:40:03 AM

Source: 169.254.169.123,0x9

Poll Interval: 10 (1024s)

PS C:\Windows\system32> w32tm /query /source

169.254.169.123,0x9

PS C:\Windows\system32> w32tm /query /configuration

[Configuration]

EventLogFlags: 2 (Local)

AnnounceFlags: 10 (Local)

TimeJumpAuditOffset: 28800 (Local)

MinPollInterval: 6 (Local)

MaxPollInterval: 10 (Local)

MaxNegPhaseCorrection: 172800 (Local)

MaxPosPhaseCorrection: 172800 (Local)

MaxAllowedPhaseOffset: 300 (Local)

FrequencyCorrectRate: 4 (Local)

PollAdjustFactor: 5 (Local)

LargePhaseOffset: 50000000 (Local)

SpikeWatchPeriod: 900 (Local)

LocalClockDispersion: 10 (Local)

HoldPeriod: 5 (Local)

PhaseCorrectRate: 7 (Local)

UpdateInterval: 100 (Local)

[TimeProviders]

NtpClient (Local)

DllName: C:\Windows\system32\w32time.dll (Local)

Enabled: 1 (Local)

InputProvider: 1 (Local)

CrossSiteSyncFlags: 2 (Local)

AllowNonstandardModeCombinations: 1 (Local)

ResolvePeerBackoffMinutes: 15 (Local)

ResolvePeerBackoffMaxTimes: 7 (Local)

CompatibilityFlags: 2147483648 (Local)

EventLogFlags: 1 (Local)

LargeSampleSkew: 3 (Local)

SpecialPollInterval: 1024 (Local)

Type: AllSync (Local)

NtpServer: 169.254.169.123,0x9 time.windows.com,0x8 (Local)

NtpServer (Local)

DllName: C:\Windows\system32\w32time.dll (Local)

Enabled: 1 (Local)

InputProvider: 0 (Local)

AllowNonstandardModeCombinations: 1 (Local)

VMICTimeProvider (Local)

DllName: C:\Windows\System32\vmictimeprovider.dll (Local)

Enabled: 1 (Local)

InputProvider: 1 (Local)

Answer 5

Hello,

According to the command result, seems you current configuration is all under normal configuration.

Best regards,

molly