Here is the setup: We have Windows Server 2008R2 servers at customer sites. For separation of trust reasons, those machines are not members of the Customers Domain. They are also not acting as a Domain host themselves, they are strictly stand alone instances. This setup can't be changed.
Windows Servers attached to the customer network receive NTP updates through "w32tm". These servers are also attached to a private Stub network with additional machines not on the customer network. I would like to provide NTP service to hosts on the stub to provide better log synchronization.
All of the documentation I can find online seems to assume that the Windows Servers are Domain Controllers.
I only want to provide the NTP Server service to the stub network if possible. It shouldn't be reachable from the customer network.
What is the best way to setup?