Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have an AD domain (2 dcs single domain) and a number of member servers. I need to configure time synchronisation so that everything is in sync.

There is a lot of fluff on this topic. Does anyone have a simple list of commands to run? And I've googled this but so many people are at odds about the best way to go on doing this.

My servers are all VMWare VMs (and I am aware of the debate about whether DCs should be virtual or physical....).

share|improve this question

You don't have to do anything manually, all domain members will sync their time with the authenticating DC, which will in turn sync with the DC that holds the PDC emulator role. You can sync the PDC emulator to an external time source if you like, but it's not a requirement. If you'd like yo do that you can follow this article:

share|improve this answer
You should definetely sync the PDCe with an external source, especially if it's on something like a VM which is likely to drift. – Brian Desmond Aug 7 '11 at 16:32
This certainly isn't true for me. See my as yet unresolved problem:… – Rich Feb 22 '12 at 16:00

+1 for joeqwerty. Just to add to his answer here is the link for VMWare specific guidance. It recommends useful patches and some other details.

If the DCs and domain members have been built with the defaults in place and have not had the settings changed through group policies or other means (e.g. editing registry direct), then they will use domain hierarchy to sync time. explains how this works and the article is from a one time developer of w32time.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.