Date and time setting

Milan Chaudhari 1 Reputation point
2021-03-08T13:35:10.653+00:00

Hi All,

I have a domain controller running on windows server 2019, all the clients are on windows 10. I want to force date and time through GPO on all clients, but unable to do so. The option on the server for changing date and time is grayed out.
75481-capture01.png

I tried also the group policy object
75482-capture02.png

Can anybody please help me changing the server time permanently and propagate the same date and time to all workstations.

Thanks in advance.

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,127 questions

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Dave Patrick 426.1K Reputation points MVP
    2021-03-08T13:58:07.53+00:00

    Some general info

    --please don't forget to Accept as answer if the reply is helpful--

    0 comments
  2. Daisy Zhou 18,701 Reputation points Microsoft Vendor
    2021-03-09T06:43:37.223+00:00

    Hello @Milan Chaudhari ,

    Thank you for posting here.

    We see Time Synchronization in an AD DS Hierarchy as below:
    75630-time1.png

    Reference:
    How the Windows Time Service Works
    https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc773013(v=ws.10)?redirectedfrom=MSDN

    Method 1: Use registry configuration method

    We can configure time synchronization via registry as below:

    ===PDC===

    If the PDC is a virtual machine, set the first one entry. Don’t set this one entry if it’s not a virtual machine.

    HLM\SYSTEM\CurrentControlSet\services\w32time\TimeProviders\VMICTimeProvider
    Name: Enabled
    Type: REG_DWORD
    Data:0

    Path: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Config
    Key Name: AnnounceFlags
    Type: REG_DWORD (DWORD Value )
    Data: 0x5

    Path: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters\Type
    Key Name: Type
    Type: REG_SZ(String Value)
    Data: NTP

    Path: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters
    Key Name: NtpServer
    Type: REG_SZ(String Value)
    Data: Peers （For example: time.windows.com,0x9）

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\NtpServer
    Key Name: Enabled
    Type: REG_DWORD
    Data: 1

    ===other DCs & Clients & member servers===
    Path: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters\Type
    Key Name: Type
    Type: REG_SZ(String Value)
    Data: NT5DS

    Path: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Config
    Key Name: AnnounceFlags
    Type: REG_DWORD (DWORD Value )
    Data: 0xa

    Method 2: Use group policy configuration method

    We can also configure time synchronization via GPO as below:

    ===Apply to the primary domain controller (PDC)===
    Computer Configuration\Policies\Administration Templates\System\Windows Time Service\Time Providers\Enable Windows NTP Client

    Computer Configuration\Policies\Administration Templates\System\Windows Time Service\Time Providers\Configure Windows NTP Client==>Type is "NTP"

    ===Apply to other domain controllers & clients===
    Computer Configuration\Policies\Administration Templates\System\Windows Time Service\Time Providers\Configure Windows NTP Client==> Type is "NT5DS"

    Time Synchronization in Active Directory Forests
    https://social.technet.microsoft.com/wiki/contents/articles/18573.time-synchronization-in-active-directory-forests.aspx

    Tip:

    1. Make sure that the UDP port 123 is open.
    2. Be able to ping the NTP time server.

    Hope the information above is helpful.

    Should you have any question or concern, please feel free to let us know.

    Best Regards,
    Daisy Zhou

    0 comments