Synchronized time on Windows Server 2012 R2
For the Kerberos protocol, which is used on Active Directory to work properly all machines need to be in sync regarding their local time.
Linked are two articles on how to configure Network Time Protocol (NTP) servers correctly with the Windows Server 2012 R2.
In essence the following needs to be done in the powershell:
w32tm /config /manualpeerlist:pool.ntp.org /syncfromflags:MANUAL
Stop-Service w32time
Start-Service w32time
You can use the event log in case you need to troubleshoot issues.
In case you get the error message "The computer did not resync because no time data was available" the problem could lie in the fact that you need to modify the group policy settings accordingly. Also see linked MS KB article on that issue.
You can retrieve the current configuration with:
w32tm /query /configuration
To resync right away:
w32tm /resync
Sources:
- Sysadmin Lab Blog: Configuring NTP on Windows Server 2012
- Microsoft Knowledge Base Article for "The computer did not resync because no time data was available"
Keywords:
Active Directory, Time Server, NTP
Comments
Post a Comment