Shulou(Shulou.com)06/02 Report--

1 on the domain controller side where the PDC role is located, open powershell with administrator privileges and enter the following command

W32tm / config / manualpeerlist: "ntp.ntsc.ac.cn" / syncfromflags:manual / reliable:yes / update

Where / manualpeerlist represents the list of external time source servers, which can be separated by spaces. Ntp.ntsc.ac.cn is the NTP time server; / syncfromflags:manual indicates synchronization with the servers in the list of specified external time source servers; / reliable:yes sets this computer as a reliable time source; / update notifies the time service that the configuration has changed to make the changes take effect.

Net stop w32time & net start w32time restart the w32time service

W32tm / resync manually synchronizes with external time source server

W32tm / query / status synchronize time server status

W32tm / query / source query time synchronization sources

W32tm / query / peers query time synchronization server and related information

2 adjust the registry

Select start, run, type regedit, and then select OK. Open the registry subkey: HKEY_LOCAL_MACHINE\ SYSTEM\ CurrentControlSet\ Services\ W32Time\ Parameters, showing that the NtpServer value is "cn.pool.ntp.org tw.pool.ntp.org" and the Type value is NTP

Open the registry subkey: HKEY_LOCAL_MACHINE\ SYSTEM\ CurrentControlSet\ Services\ W32Time\ Config. Set AnnounceFlags to 5.

Enable NTPServer. Open the registry subkey: HKEY_LOCAL_MACHINE\ SYSTEM\ CurrentControlSet\ Services\ W32Time\ TimeProviders\ NtpServer, and the Enabled value is 1.

Set the synchronization interval and open the registry HKEY_LOCAL_MACHINE\ SYSTEM\ CurrentControlSet\ Services\ W32Time\ TimeProviders\ NtpClient\ SpecialPollInterval. The value of SpecialPollInterval is 604800 of the decimal system (that is, 604800 seconds, 1 day).

3 configure group policy and set time synchronization between domain members and PDC server

In group policy management, select: computer configuration-Policy-Windows Settings-Security Settings-system Services, and configure domain client automatic windows time service.

In Group Policy Management, right-click "Default Domain Policy" and edit. Select: computer configuration-Administrative templates-system-Windows time Service

Double-click Global time configuration and select enabled. Modify the value of MaxNegPhaseCorrection to 3600 (that is, 3600 seconds, 1 hour); modify the value of MaxPosPhaseCorrection to 3600 (that is, 3600 seconds, 1 hour); change the value of AnnounceFlags to 5; click "apply", "OK".

Enable the Windows NTP client, select enabled; click apply, OK.

With regard to the GPO of the OU where the domain control (PDC) is located, do not "configure the Windows NTP client". Use the system default to set the "unconfigured" state.

Shut down w32time and restart w32time for the policy to take effect

4 configure client and server time synchronization and verify

Update Domain Policy gpupdate/force

Time synchronization with NTP servers in the domain and verify the source of NTP synchronization

Modify the local time of the client in the domain, and after 17 minutes, automatically update and synchronize the service time.

So far, the deployment of the NTP server in the overall domain environment has been completed. 1. The synchronization between the client and the domain NTP server has been realized. 2. The synchronization between the domain controller time and the external network NTP server time has been realized.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.