Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

The time on my domain is 50 minutes behind the correct time. I would like to change the time on all the servers in the domain to reflect the correct time. Here is the setup:

Two physical machines with four Hyper-V guests each.

Node1 - first physical machine, Windows Server 2008 R2 Datacenter

Node2 - second physical machine, Windows Server 2008 R2 Datacenter

DC1 - first AD server, Windows Server 2008 R2 Standard

DC2 - second AD server, Windows Server 2008 R2 Standard

Web1 - first web server, Windows Server 2008 R2 Standard

Web2 - second web server, Windows Server 2008 R2 Standard

App1 - first Sharepoint App server, Windows Server 2008 R2 Standard

App2 - second Sharepoint App server, Windows Server 2008 R2 Standard

DB1 - Database server on Hyper-V cluster, Windows Server 2008 R2 Datacenter

App3 - Standalone .net app server, Windows Server 2008 R2 Standard

How should I proceed with the change in time on all these servers? Prompt advice would be appreciated.

Thanks!

share|improve this question
1  
which dc holds your PDC Emulator role? –  DKNUCKLES Oct 2 '12 at 15:51

1 Answer 1

The domain controller holding the PDC emulator role is the master time server for the domain.

Follow this guide: http://technet.microsoft.com/en-us/library/cc786897(v=ws.10).aspx

All the rest will begin to synchronize. Be prepared for authentication failures as Kerberos only tolerates a 5 minute time difference. Plenty of publicly available documentation on how to configure and verify all of this.

share|improve this answer
1  
+1. Please don't change the time on all your servers individually. They should be syncing with a DC in their site; and all DCs in the domain should be syncing to the PDCe, the PDCe in each domain should be syncing to the PDCe in the forest root domain, and finally that PDCe should by syncing to a reliable external time source like pool.ntp.org. If that is not the case, then you need to address that problem first. –  Ryan Ries Oct 2 '12 at 16:18
    
You actually reminded me of a good point. Be sure that all your subnets are defined in sites and services so that this hierarchy is followed! –  SpacemanSpiff Oct 2 '12 at 18:21
    
@SpacemanSpiff Over 5 minutes works just fine these days, actually. support.microsoft.com/kb/956627 –  Shane Madden Oct 3 '12 at 5:57
    
@ShaneMadden - good to know, thanks! –  SpacemanSpiff Oct 3 '12 at 10:06

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.