Time difference between Clients & Domain Controller

Question

Hi,

We are facing a issue with time difference in our AD domain. Some pcs in the domain are having 2 or 3 minutes of time difference between the DCs. We have 2 DCs and the time is accurate on the DCs. Users are complaining because they are getting late to join for the meeting because of these time differences. What could be the reason behind this & how can we rectify this?

Answer 1

what is client time source . type below commands and send output. Also run this on DC as well

w32tm /query /status
w32tm /query /configuration
w32tm /query /source

Answer 2

Some general info

• All domain members should use NT5DS domain time.
• Desktops and member servers sync with any domain controller.
• Domain controllers sync with PDC emulator (one per domain)
• PDC emulator in child domain can sync with any domain controller in parent domain.
• PDC emulator in parent domain syncs with either a hardware clock or possibly an external source.
  https://blogs.technet.microsoft.com/nepapfe/2013/03/01/its-simple-time-configuration-in-active-directory/

Also you can follow along here.
https://learn.microsoft.com/en-us/windows-server/networking/windows-time-service/configuring-systems-for-high-accuracy

--please don't forget to upvote and Accept as answer if the reply is helpful--