Domain Server Time Is Off
Posted on august 2 2018 october 6 2020 author coltrinit categories active directory misc server 2008 r2 server 2012 windows 10 windows 7.
Domain server time is off. Other servers exchange other domain controller sql server iis and a terminal services server should sync time with the newly updated time on the server. Troubleshooting time synchronization for ad domain joined computers if your computer is part of an active directory domain you need to understand the architecture of time synchronization in the ad domain. Time is a crucial security control to protect against certain attacks e g replay attacks in the kerberos authentication protocol. For domain joined computers they will pull the time from the domain controllers by default.
On the domain controller holding the pdc emulator flexible single master operations fsmo role in the forest root domain of your active directory forest should have an external to the forest time source specified. On every other dc time synchronization should be handled by the windows time service automatically. Yesterday i got to dive into a computer that had been setup by a vendor and was receiving a different time than the domain computers even though it had been joined to the domain. I have a domain controller running in vm on hyper v the time seems to be steadily getting faster over the x mas period it s 5 faster which seems odd.
I know how to change the time and i belive we setup an ntp server on the dc and ensured time sync was turned off on hyper v. I don t really want to keep setting the time.