Configuring time synchronization on a domain controller with an NTP server
Configuring time synchronization on a domain controller with the PDC Emulator FSMO role in Windows Server is done with these commands at the command prompt or PowerShell.
Here are the main steps:
- Check the current time service settings:
w32tm /query /configuration
- Select the synchronization mode with a manual source:
w32tm /config /syncfromflags:manual
- Specify specific servers for synchronization (in this case, the Ukrainian NTP server):
w32tm /config /manualpeerlist:”pool.time.in.ua”
(You can add multiple servers, separating them with spaces, and they must all be in quotes.)
- Set the status that this machine is a reliable time source:
w32tm /config /reliable:yes
- Update the time service configuration:
w32tm /config /update
- Verify the changes:
w32tm /query /configuration
- Perform time synchronization with a new source:
w32tm /resync
These actions ensure that the time on the domain controller is set and updated correctly, which is important for the correct operation of the domain and security services.