We are eventually migrating to 100% cloud and AD Azure, however, we still have many new PCs joining our domain until then. As soon as we join a PC to our domain, the date/time becomes unedited to the user and is syncing to a local AD server for its time. 75% of our laptops never again connect with our local domain since they are out in the field and we do not use VPN (we are cloud-based for everything).
Our network admin says we cannot turn off this behaviour. Is there nothing we can do so when we join a PC to our domain, the time server remains as time.microsoft.com? They are also saying there are no GPOs doing this.