Answered by:
Windows Time Service registry entries

Question
-
I've browsed around a number of blogs and posts about setting up the time service in a Windows AD domain
Checking through current settings (forest level w2k3, most DCs are w2k8r2):
w32tm /dumpreg /subkey:parameters /computer:memberservername
I get entries:
Type: NT5DS
NtpServer: time.windows.com
QUESTION: If the "Type" is set to NT5DS, is the "NtpServer" entry not used, or irrelevant? Or should this entry match the time source our PDC is using?
Our PDC is pointing to another time source than what is listed in this registry entry.
Thanks
Monday, February 23, 2015 4:17 PM
Answers
-
Hi,
Based on my research, the value NT5DS means the time service synchronizes from the domain hierarchy, which is normal as the way I see it. All domain computers other than the PDC from root domain should be synchronizing time from domain hierarchy.
In addition, the value of the registry entry above should not match the one from the PDC of the root domain.
More information for you:
Windows Time Servicehttps://technet.microsoft.com/en-us/library/bb490845.aspx
Registry entries for the W32Time service
https://support.microsoft.com/kb/223184/en-us
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.
- Marked as answer by DWO2015 Tuesday, February 24, 2015 1:01 PM
Tuesday, February 24, 2015 7:13 AM
All replies
-
Hi,
Based on my research, the value NT5DS means the time service synchronizes from the domain hierarchy, which is normal as the way I see it. All domain computers other than the PDC from root domain should be synchronizing time from domain hierarchy.
In addition, the value of the registry entry above should not match the one from the PDC of the root domain.
More information for you:
Windows Time Servicehttps://technet.microsoft.com/en-us/library/bb490845.aspx
Registry entries for the W32Time service
https://support.microsoft.com/kb/223184/en-us
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.
- Marked as answer by DWO2015 Tuesday, February 24, 2015 1:01 PM
Tuesday, February 24, 2015 7:13 AM -
I have already started a Wiki to describe how time sync should be configured in an AD forest: http://social.technet.microsoft.com/wiki/contents/articles/18573.time-synchronization-in-active-directory-forests.aspx
This posting is provided AS IS with no warranties or guarantees , and confers no rights.
Ahmed MALEK
My Website Link My Linkedin Profile My MVP ProfileTuesday, February 24, 2015 9:55 AM -
Thank you. I found what I was looking for in the first link:
NtpServer
Establishes a space-delimited list of peers from which a computer obtains time stamps, consisting of one or more DNS names or IP addresses per line. Computers connected to a domain must synchronize with a more reliable time source, such as the official U.S. time clock. This setting is used only when Type is set to NTP or AllSync.
Tuesday, February 24, 2015 1:02 PM