Configuring an Authoritative Time Server with Group Policy Using WMI Filtering

re: Configuring an Authoritative Time Server with Group Policy Using WMI Filtering

outosend — Mon, 10 May 2010 08:15:35 GMT

great Brian ,

please correct me if iam wrong ,simply if i had 2008 DC and i need to make all PCs in all branches update the time from the DC just i need to configure NTP policy ? or i need additional configuration ?

re: Configuring an Authoritative Time Server with Group Policy Using WMI Filtering

bobdrake — Fri, 01 May 2009 17:00:32 GMT

Hello CJH and Broonie27.....

Let me first address the question posed by CJH:

If you configured the settings for the PDC role according to the above article WITHOUT manually configuring the settings, then no you do not have to do anything when the PDC role moves to another DC. The old PDC will revert back to the NT5DS settings as normal.

SEE BELOW FOR ADDITIONAL INFO TO ANSWER BROONIE27

Now your question Broonie:

If you have configured a GPO to configure your client machines for NTP settings (pointing them to your PDC) and you have NOT manually configured your clients, then when the policy is removed the client machines will revert back to the normal domain hierarchy settings and you do not have to configure anything.

Why would you not have to change anything?

When you create a policy, the settings are configured in the following location (which does take precendece over the next location):

HKLM/Software/Policies/Microsoft/Windows/W32time (the W32time key is created with the policy)

When the policy is removed, then this key is also removed

The other location that is the default is:

HKLM/System/CurrentControlSet/Services/W32time

Providing that you both have not changed the default settings in the location above (under the services key), simply removing the policy, or leaving the old PDC alone will be fine. The defaults will take place again in both scenarios.

Hope this helps.

Bob Drake

Sr Technical Lead

Directory Services

Microsoft

re: Configuring an Authoritative Time Server with Group Policy Using WMI Filtering

broonie27 — Fri, 01 May 2009 03:12:19 GMT

I have a GPO which forces my clients and member servers to use my PDC emulator as I time source with the NTP method. I have then configured my PDC to look to an external time source.

I have been told that I don't have to create and apply the GPO at all and that simply pointing the PDC to an external source will work. Is this so as the default behaviour did not seem to be working?

If I don't need the GPO and simply remove it will the clients and member servers then fall back to the default MS method or is there somethng else I should do. Someone mentioned I may need to do a "w32tm /config /syncfromflags:domhier /update" all the non-DC machines.

re: Configuring an Authoritative Time Server with Group Policy Using WMI Filtering

chaselton — Mon, 12 Jan 2009 20:57:48 GMT

I have a question about this:

If this GPO applies the appropriate time settings (type=NTP, NtpServer=yourtimeserver) if/when the PDCe role is moved, what about the DC the role was moved from?

Doesn't there need to be a GPO in place that will change the Windows Time Service settings back to those appropriate for a non-PDCe?

Configuring an Authoritative Time Server with Group Policy Using WMI Filtering

Windows Time Service — Sat, 06 Dec 2008 02:47:47 GMT

Brian Singleton has posted on article on configuring w32time via Group Policy using WMI on the AskDS

BlogMS Weekly Articles Published – 10th November 2008 to 16th November 2008

BlogMS - Official Microsoft Team Blogs — Mon, 17 Nov 2008 18:29:43 GMT

203 Microsoft Team blogs searched, 94 blogs have new articles in the past 7 days. 223 new articles found

Must Have Group Policy Setting!

The Life of Brian — Fri, 14 Nov 2008 22:36:22 GMT

I recently blogged about time and how critical it is in a domain environment. Just this morning I read

re: Configuring an Authoritative Time Server with Group Policy Using WMI Filtering

dsmvp — Fri, 14 Nov 2008 19:03:41 GMT

Brian, great post here. I have recently posted about W32tm and this is something that can help out a lot of customers. In my opinion this is a must have group policy setting.

Configuring an Authoritative Time Server with Group Policy Using WMI Filtering | MS Tech News

Fri, 14 Nov 2008 04:40:07 GMT

PingBack from http://mstechnews.info/2008/11/configuring-an-authoritative-time-server-with-group-policy-using-wmi-filtering/