This guide explains how to configure Windows Server 2022 to synchronise time with an external Network Time Protocol (NTP) source in an Active Directory environment. The normal design is to configure the PDC Emulator in the forest root domain to use an external time source. Other domain controllers, member servers and workstations should normally continue to synchronise through the Active Directory domain hierarchy.
If you are maintaining an older environment, see the companion guide for configuring external NTP time synchronisation on Windows Server 2008 R2 SP1.
Accurate time is important for Active Directory and Kerberos authentication. If clocks drift too far apart, users and services can experience authentication problems.
Important: These instructions are for a conventional AD DS domain. Do not configure every domain controller to use an external NTP server. In a multi-domain forest, identify the PDC Emulator in the forest root domain, not simply the PDC Emulator in the domain you happen to be working in.
Continue reading →