Tuesday, December 13, 2011

Synchronize time throughout entire Windows network

Synchronizing time on Windows domain requires following the Active Directory domain hierarchy to find a reliable time source for entire domain. In a Windows Server 2003 Active Directory forest, the server that holds the primary domain controller (PDC) emulator role acts as the default time source foryour entire network.
Each workstation and server in this network will try to locate a time source for synchronization. Using an internal algorithm designedto reduce network traffic, systems will make up to six attempts to find a timesource.
The order of these attempts are:
  • Parent domain controller (on-site)
  • Local domain controller (on-site)
  • Local PDC emulator (on-site)
  • Parent domain controller (off-site)
  • Local domain controller (off-site)
  • Local PDC emulator (off-site)
To ensure that servers are finding the proper time, configure PDC emulator to receive the time from a valid and accuratetime source. To configure this role, follow these steps:
  1. Log on to the domain controller.
  2. Enter the following at the command line:
W32tm /config /manualpeerlist:<timeserver> /syncfromflags:manual
 
<timeserver>is a space-delimited list of DNS and/or IP addresses. When specifying multiple timeservers, enclose the list in quotation marks.
  1. Update the Windows Time Service configuration. At the command line, enter either
    w32tm/config/update or 
     Net stop w32timeNet start w32time
 
If a system isn't a member of a domain, manually configure it to synchronize with a specified time source. Follow these steps:
  1. Go to Start | Control Panel, and double-click Date And Time.
  2. On the Internet Time tab, select a time server from the drop-down list, or enter the DNS name of your network's internal time source.
  3. Click Update Now, click Apply, and click OK.
Note: It's important to make sure that any access control lists on network allow UDP port 123 to and from systems to the selected time source. For more information, see Microsoft's Windows Time Service Tools and Settings documentation.

No comments:

Post a Comment