Wednesday, 11 December 2013

Configuring an external NTP source on Windows 2003 domain controllers

Before I perform any Active Directory upgrade, I always run the Microsoft IT environment health scanner. This tool was written by Microsoft to aid customer moving to Essential Business Server, no long dead. It's still a great tool for assessing the health of the existing Active Directory.
One of the most common issues found the time configuration on 2003 domain controllers.




To address this issue you must set these two registry entries on the PDC emulator.

Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Config]
"MaxNegPhaseCorrection"=dword:0002a300
"MaxPosPhaseCorrection"=dword:0002a300

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\NtpClient]
"SpecialPollInterval"=dword:00000384

And issue these two commands at CMD prompt.

w32tm /config /manualpeerlist:"0.pool.ntp.org 1.pool.ntp.org" /syncfromflags:manual /reliable:yes /update
net stop w32time && net start w32time
w32tm /resync

No comments:

Post a Comment