کد:
http://www.windowsnetworking.com/kbase/WindowsTips/WindowsServer2008/AdminTips/ActiveDirectory/AQuickTipToConfigureTimeServiceInActiveDirectoryEnvironment.html
This article explains how you can configure time service for an active directory environment.
Windows Time is necessary for domain controllers and client computers. This is a requirement for the Kerberos protocol for authentication purpose. You should keep the following points in mind when configuring the Windows Time Service in an Active Directory environment:
- Configure your client computers to sync time from it's authentication or local domain controller in the site
- Configure your DC to sync time from it's PDC Emulator for that domain
- Configure your Child PDC to sync time from any DC in the Forest Root domain
- Configure your Forest PDC to sync time from an external source (time.windows.com)
For the above things to work, you need to modify two registry entries:
For all Domain Controllers and PDC in the Forest except PDC in the Forest:
- Key: HKLM\System\CurrentControlSet\Services\W32Time\Par ameters
- Entry: Type
- Value: NT5DS
For Forest PDC:
- Key: HKLM\System\CurrentControlSet\Services\W32Time\Par ameters
- Entry: Type
- Value: NTP
- Entry: NTPServer
- Value: time.windows.com
موضوعات مشابه: