How to Set an NTP Server Group Policy?

What is NTP-server?

An NTP server is indispensable for ensuring consistent timekeeping across numerous devices within a corporate network. This is especially important when it comes to monitoring and recording system events, as precise timestamps are vital for efficient analysis and problem-solving. When an NTP server is implemented, all connected devices can synchronize their clocks with the centralized time source, thereby minimizing inconsistencies and ensuring reliable operation.

Moreover, having a central database for time data facilitates easy tracking and auditing of network activity, which is crucial for adherence to compliance standards and maintaining security protocols. In summary, an NTP server plays a vital role in streamlining operations within a corporation by providing accurate time synchronization and logging capabilities.

Cloud Servers from $5 / moIntel Xeon Gold 6254 3.1 GHz CPU, SLA 99,9%, 100 Mbps channelTry

Server configuration

In the Windows there is daemon for control time, which allows to serve another computer precise date and time - win32tm. Commonly setup service start at the Domain Controller automatically, but there is situation when we need indicate specific parameters and value. For that we can use CMD with utility which we described above for setup our server and then with Group Policy spread config to the client machine.

First of all explain syntax of the utility w32tm: w32tm [/options] value. At the begin we indicate utility than options for they and enter value!

Make sure that service was not shutdown:

After confirmation about stopped service we can enter config into our server, also we need indicate master NTP server which will synchronize time and date. For reason fault-tolerance we need to indicate minimum four servers with near with you region:

Wait till the end of the process and synchronize:

Than enable by the CLI command:

Make sure that our settings was applied!

Alright configuration NTP-server have done!

Group Policy

Open search bar and look for Group Policy, launch them in the Domain Controller or machine with AD:

Choose GPO or create new, by clicking on the Forest -> Domains -> Domain and click by the left button of mouse. Choose Create and name Policy:

Select the one you just created and go to the following sequences  Computer Configuration -> Policies -> Administrative Templates -> System -> Windows Time Service.

Choose Time Providers and edit them value as you can see in the picture below:

Edit point with NTP server and indicate our NTP machine in my case that 192.168.1.1 and next you can see flag for synchronization. Therefore change next point:

Then for properly work we need to link our GPO to the domain, click right button at the domain and link them:

On the client side you can wait when policies will update, that can take a long time, however there is way to manually resync client with domain controller:

The one disadvantage of this way, that requirement to update every computer manually!

Highlight! Have a look at the list of user and computer which in the table, due to potential issue with work NTP-server, you have to exclude or select another group without them. So server will have exclusive options, which we set up before!

The implementation of an NTP server is crucial for maintaining consistent and accurate timekeeping across a corporate network. Precise timestamps are essential for effective analysis and troubleshooting of system events, making an NTP server indispensable in ensuring reliable operations.