Deploy NTP server, the client domain controller Time synchronization

1 domain controller role where the end PDC, open powershell, enter the following command with administrator privileges

• w32tm / config /manualpeerlist:"ntp.ntsc.ac.cn "/ syncfromflags : manual / reliable: yes / update

Deploy NTP server, the client domain controller Time synchronization

Wherein / manualpeerlist represents an external time source server list, separated by spaces between a plurality of available servers, ntp.ntsc.ac.cn is NTP time server; / syncfromflags: manual indicates synchronization with the external time designated source server list server; / reliable: yes set this computer is a reliable time source; / update notification configuration changes to the service time for the changes to take effect

• net stop w32time & net start w32time Restart the w32time service
Deploy NTP server, the client domain controller Time synchronization
to synchronize • w32tm / resync manually with an external time source server

Deploy NTP server, the client domain controller Time synchronization

• w32tm / query / status server time synchronization status
Deploy NTP server, the client domain controller Time synchronization

• w32tm / query / source query time synchronization source
Deploy NTP server, the client domain controller Time synchronization
• w32tm / query / peers query time synchronization server and related information
Deploy NTP server, the client domain controller Time synchronization

2 Adjust Registry
• Select "Start", "Run", type regedit, and then select "OK." In turn open the registry subkey: HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Services \ W32Time \ Parameters, display NtpServer value "cn.pool.ntp.org tw.pool.ntp.org", Type value of the NTP
Deploy NTP server, the client domain controller Time synchronization
• turn open the registry sub key: HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Services \ W32Time \ Config. Set AnnounceFlags 5.
Deploy NTP server, the client domain controller Time synchronization
• Enable NTPServer. In turn open the registry subkey: HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Services \ W32Time \ TimeProviders \ NtpServer, Enabled value 1
Deploy NTP server, the client domain controller Time synchronization
• set a synchronization interval period, open the registry HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Services \ W32Time \ TimeProviders \ NtpClient \ SpecialPollInterval, SpecialPollInterval decimal value of 604800 (that is 604,800 seconds, 1 day)
Deploy NTP server, the client domain controller Time synchronization
3 configure group policy settings and time domain member server PDC synchronization
• in the group policy management, select: computer configuration - setting policy -Windows - security settings - system services, clients automatically configure domain automatic windows time service
Deploy NTP server, the client domain controller Time synchronization
• in the group policy management, select the "Default domain policy" Right, ed. Select: Computer Configuration - Administrative Templates - System -Windows Time Service
Deploy NTP server, the client domain controller Time synchronization
• Double-click on "Global Time Configuration", select "Enable." Modified MaxNegPhaseCorrection is 3600 (i.e. 3600 seconds, 1 hour); modified MaxPosPhaseCorrection is 3600 (i.e. 3600 seconds, 1 hour); values are modified AnnounceFlags 5; "Apply", "OK."
Deploy NTP server, the client domain controller Time synchronization
• Enable Windows NTP Client, select the "Enabled"; "Apply", "OK."
Deploy NTP server, the client domain controller Time synchronization
• GPO on the domain controller (PDC) where the OU, must not "Configure Windows NTP Client." Use the default setting "not targeted" state can be.
Deploy NTP server, the client domain controller Time synchronization
• Close w32time and restart w32time, make the policy effective
Deploy NTP server, the client domain controller Time synchronization
4 configure the client and server time synchronization and verify
• Update domain policy gpupdate / Force
• sync with the domain NTP server time, and verify that NTP synchronization source
Deploy NTP server, the client domain controller Time synchronization
• Modify domain client local time after over 17 minutes, automatic update and synchronization service time.


This completes the deployment of global field environment, NTP server, 1, to achieve synchronization client and NTP server domain, 2, realized the domain controller time synchronization with the NTP server outside the network time.

Guess you like

Origin blog.51cto.com/13781144/2452552