Domain Controller Time Server
All domain controllers in the forest root domain synchronize time with the pdc emulator fsmo role holder.
Domain controller time server. All dcs synchronize time with a domain controller pdc role holder. All pdc emulator fsmo role holders in child domains synchronize their time with domain controllers in their parent domain including potentially the pdf emulator fsmo role holder in the forest root domain. The windows time service in domain hierarchy mode can use a closer reliable dc as a time source while that dc is syncing to the pdc.
On the server that net time identified nettimeserver primary domain controller right click on your powershell icon and choose run as administrator. All domain controllers in a domain nominate the primary domain controller pdc operations master as their in bound time partner. All member servers follow the same process that client desktop computers follow.
In a stock active directory deployment the only computer configured with a time server explicitly will be computer holding the pdc emulator fsmo role in the forest root domain. Configure a time server for active directory domain controllers by rick vanover in the enterprise cloud in microsoft on january 24 2011 3 51 am pst. Pdc synchronizes time with itself by default or you can configure it to synchronize with an external time source on the internet ntp server.
However you may wish to mark them as reliable yes to allow domain members to get time from a dc other than the pdc particularly in large domains. Run the following command to only check how much time your server is off from the global time authority. All client desktop computers nominate the authenticating domain controller as their in bound time partner.
How to determine what time server your domain controller is using. If you want to know what your domain controllers time server configuration is you can run two simple command line query s. Type net time querysntp or.
How to check your domain controller time against a global time provider.