Braindump: ADDS NTP Configuration via GPO | User Error User Error Ramblings of a tinkering SysAdmin Menu Skip to content Home Search Search for: Braindump: ADDS NTP Configuration via GPO January 14, 2014 / dstreefkerk There’s a great article on the Microsoft AD team blog about configuring the authoritative time server automatically via group policy and WMI filters. This may save you from domain time sync issues if your PDC emulator role eventually ends up moving to a different server. http://blogs.technet.com/b/askds/archive/2008/11/13/configuring-an-authoritative-time-server-with-group-policy-using-wmi-filtering.aspx Their article covers how to set up the WMI filter, but doesn’t address the settings for NTP. Those are listed in detail under this support note. These are the settings I’ve implemented in my GPO using Admin Templates->System->Windows Time Service: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesW32TimeConfig] "MaxNegPhaseCorrection"=dword:00000708 "MaxPosPhaseCorrection"=dword:00000708 "AnnounceFlags"=dword:00000005 [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesW32TimeParameters] "Type"="NTP" "ntpserver"="au.pool.ntp.org,0x1" [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesW32TimeTimeProvidersNtpClient] "Enabled"=dword:00000001 "SpecialPollInterval"=dword:00000384 [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesW32TimeTimeProvidersNtpServer] "Enabled"=dword:00000001 Share this: Twitter Facebook Like this: Like Loading... Related Technology Active Directory, Group Policy, Systems Administration, Windows Post navigation ← Auto-map all available HP StoreVirtual/LeftHand iSCSI volumes in Windows via PowerShell Reporting on Spiceworks tickets via SQLite and PowerShell → Leave a Reply Cancel reply Enter your comment here... Fill in your details below or click an icon to log in: Email (required) (Address never made public) Name (required) Website You are commenting using your WordPress.com account. ( Log Out / Change ) You are commenting using your Twitter account. ( Log Out / Change ) You are commenting using your Facebook account. ( Log Out / Change ) Cancel Connecting to %s Notify me of new comments via email. Notify me of new posts via email. Δ Search for: Subscribe to Blog via Email Enter your email address to subscribe to this blog and receive notifications of new posts by email. Email Address: Subscribe Join 537 other followers Follow me on Twitter My Tweets Tags Active Directory ActiveSync APIs Applications Archiving ASP.NET Azure CakePHP CAS Array CIM Clustering DHCP DPM EDMS Enterprise Vault Excel Exchange Exchange 2010 Exchange Server Failover Clustering FreshDesk Fun Get-WmiObject Group Policy Helpdesk HP Proliant Hyper-V Invoke-WebRequest iOS iSCSI Joomla JSON LeftHand/StoreVirtual Linux/Unix MDT Microsoft Word Mitel Networking Nimble Office365 Out-GridView Outlook PHP Policy Patrol PowerShell Printing PRTG Python ReadyNAS Regex Registry SCCM Scripting Security Select-String Server 2008 R2 Server 2012 Server 2012 R2 Shoretel Software Deployment Spiceworks SQL SQLite SSL VPN System Center Systems Administration Tips Tools of the trade Umbraco Virtualisation Web APIs Windows Windows Deployment WMI XML Recent Comments Graham Dahl (@GrahamDahl1) on PowerShell: Download a list of files Noone1 on Using Azure Blob Storage as a highly-available CDP and AIA location for your internal PKI Daniel S on Retrieving voicemail files from a Mitel 3300 controller, and converting them to WAV Ron on Retrieving voicemail files from a Mitel 3300 controller, and converting them to WAV Daniel S on Using Azure Blob Storage as a highly-available CDP and AIA location for your internal PKI Blog at WordPress.com. Follow Following User Error Join 537 other followers Sign me up Already have a WordPress.com account? Log in now. User Error Customize Follow Following Sign up Log in Copy shortlink Report this content View post in Reader Manage subscriptions Collapse this bar %d bloggers like this: