How to configure time sync in single domains:

• All devices use NT5DS domain time for synchronization.
• Desktops and member servers sync with any domain controller.
• Domain controllers sync time with the PDC Emulator in the domain.
• PDC Emulator syncs with an external source for accurate timekeeping.

Identify PDC Emulator role holder

1. Open the command prompt on any domain controller or server within
   the domain.
2. Execute the following command:

netdom query fsmo

3. Locate the server listed under the “PDC” role. This server is your PDC Emulator and will be the server to continue this guide on.

Configure NTP servers on PDC Emulator

I recommend these time servers.

Run the following commands on the PDC Emulator to configure NTP servers:

w32tm.exe /config /syncfromflags:manual /manualpeerlist:"0.pool.ntp.org,0x8 time.windows.com,0x8 132.163.96.1,0x8" /reliable:yes /update
w32tm.exe /config /update

What does 0x8 mean? This is a flag to tell w32tm how to treat the NTP server. The following flags are supported:

0x1: Wait the for the special interval instead of the standard interval before sending the next query
0x2: Use the specified NTP server as fallback only
0x4: Force sending symmetric active peer requests to the specified NTP server
0x8: Force sending client requests to the specified NTP server

This completes the time synchronization configuration!

Other useful commands

Check current time configuration. On workstations you should see one of the domain controllers listed as source.

w32tm /query /status

Check the current time offset on the machine.

w32tm /monitor /computers:0.pool.ntp.org,time.windows.com,132.163.96.1

Sync time from domain.

w32tm /config /syncfromflags:domhier /update