I have a small Windows domain (all servers running Windows 2008), with a single Windows 2008 Domain Controller. What is the best way to synchronise the time across all servers with an Internet Time Server?
When your computer become part of the domain they will use the Domain Controller to sync their time (it's require for the authentification mechanism to work properly). Make sure your Domain Controller is sync with a good internet source and you're pretty much there.
You can look at these articles from Microsoft for more information:
- Windows Time Service and Resulting Internet Communication in Windows Server 2008
- Introduction to Administering the Windows Time Service
To synchronize your Domain Controller, you'll want to set it up to go over the internet and get it's time. Ntp.org has lists of servers on that but make sure you follow their rules of engagement before you start using them. To do the setup you may want to use WindowsTimeAgent, it provides a single place to edit all the Registry keys necessary to set up time sync properly
I wasted a lot of time fiddling with Windows Time Service, until I found this ancient software (yes, you're reading right, you should download the IE4+ version) that cured that headache once and for all.
Find yourself a close server, configure it about 74 seconds and you got yourself a synced machine.