Network Security Internet Technology Development Database Servers Mobile Phone Android Software Apple Software Computer Software News IT Information

In addition to Weibo, there is also WeChat

Please pay attention

WeChat public account

Shulou

Win12&16 domain control settings NTP server

2025-01-17 Update From: SLTechnology News&Howtos shulou NAV: SLTechnology News&Howtos > Servers >

Share

Shulou(Shulou.com)06/02 Report--

PDC:

Specify an external time source and synchronize with it, and operate on the administrator command line on the domain controller where the PDC is located (the PDC role (the default authoritative time service source within the domain).

W32tm / config / manualpeerlist: "3.cn.pool.ntp.org 1.cn.pool.ntp.org" / syncfromflags:manual / reliable:yes / update

Net stop w32time & net start w32time

W32tm / resync

W32tm / query / status

/ manualpeerlist represents the list of external time source servers. Multiple servers can be separated by spaces. 210.72.145.44 is the time server ip address of China National time Service Center.

/ syncfromflags:manual means to synchronize with a server in the list of specified external time source servers

/ reliable:yes set up this computer is a reliable source of time. This setting makes sense only for domain controllers.

/ update notifies the time service that the configuration has changed to make the change take effect

In a domain environment, you only need to set the external time source of the root domain controller, and other servers will automatically set time synchronization with the domain controller when they are added to the domain.

Set Group Policy

Set time synchronization for domain members

Open Active Directory users and computers, right-click on the domain, and property. Group Policy, open.

Right-click on "Default Domain Policy" and edit.

Computer configuration-Policy-Administrative templates-system-Windows time Service, double-click Global time configuration, and select enabled.

Modify the MaxNegPhaseCorrection value to 3600 (that is, 3600 seconds, 1 hour)

Modify the MaxPosPhaseCorrection value to 3600 (that is, 3600 seconds, 1 hour)

Modify the value of AnnounceFlags to 5

Click "apply" and "OK".

Computer configuration-Policy-Administrative templates-system-Windows time Service-time provider, enable Windows NTP client, select enabled.

Shut down w32time and restart w32time for the policy to take effect

Net stop w32time & net start w32time

Computer configuration-Policy-Windows Settings-Security Settings-system Services-Windows Time

Set up automatic startup to prevent some ghost systems from being optimized to disable this service.

Client verifies NTP

Configure client and server time synchronization and verify

Update domain policy gpupdate/force on member servers

Time synchronization with NTP servers in the domain and verify the source of NTP synchronization

W32tm / resync

W32tm / query / status

W32tm / query / source

W32tm / query / peers

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.

Views: 0

*The comments in the above article only represent the author's personal views and do not represent the views and positions of this website. If you have more insights, please feel free to contribute and share.

Share To

Servers

Wechat

© 2024 shulou.com SLNews company. All rights reserved.

12
Report