NTP - configure windows server (in domain environment) to use linux server as NTP

Question

Hello! I'm trying to force one windows server (server is in domain) to sync time with another server (Linux) who acts as NTP server. I'm trying to do this just for this windows server. Does anybody knows proper procedure because everything I tried doesn't work? Thank you!

Best regards!

Answer 1

Hello,

If you want to ensure that your windows server will not use the domain hierarchy for NTP you have to check first the value of Type under TimeProviders to ensure that it is not NT5DS via the command w32tm /query /configuration

After that you have two option to change that via GPO or via command line, below an example via command line :
w32tm /config /manualpeerlist:"ntpserver.contoso.com clock.adatum.com" /syncfromflags:manual /update

With GPO check this article (Not a Microsoft link) :
https://theitbros.com/configure-ntp-time-sync-group-policy/

Regards,

Answer 2

Hello,

the type is set to NTP (local):

NtpServer: my_linux_server, 0x9

But it does not work...

For w32tm /query /status I have Source:

Is this OK for Source?

Any other suggestion much appreciated.

Best regards!

Answer 3

I've mentioned that I'm trying to sync time on windows server with linux server (NTP server). Maybe there is some different configuration that I must use? Both servers are on same LAN network (there's no blocking between them). When I enter command w32tm /monitor /computer: my_linux_NTP_server I get an error:

Is there something I need to configure on Linux (chrony is configured as NTP server on linux)?

Answer 4

We managed to get the sync. We noticed that time won't sync if the the difference is greater than ~12h. When we try to sync in that case we get the next error:

Is there anything to be changed so that we can sync greater times in difference?

Answer 5

Hello,

If the offset is to big you will have this kind of message, you can try to change some registry key :

• MaxPosPhaseCorrection
• MaxNegPhaseCorrection

Below the article regarding these keys and the configuration :
https://learn.microsoft.com/en-us/troubleshoot/windows-server/identity/configure-w32ime-against-huge-time-offset

Regards,