Time Synchronization and Domain Controller VM's

  • [アーティクル]

Hi,

often, I’m getting asked how to configure Time Synchronization for Hyper-V VM’s that run the Domain Controller (DC) Role. Our original recommendation was to disable the time synchronization and leave it up to the DC’s own functionality to synchronize time with other DC’s.

On the other hand, we also have our PM Bens correct recommendation that there is ‘Never’ a reason to do so. (Question#8)
https://blogs.msdn.com/b/virtual_pc_guy/archive/2010/11/19/time-synchronization-in-hyper-v.aspx

 Now, just recently I found that our technet article now actually recommends to partially disable time synchronization:
https://technet.microsoft.com/en-us/library/virtual_active_directory_domain_controller_virtualization_hyperv(WS.10).aspx

“To partially disable the Hyper-V time synchronization provider, leave Time synchronization enabled under Integration Services and run the following command from an elevated command prompt on the guest domain controller:
 reg add HKLM\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\VMICTimeProvider /v Enabled /t reg_dword /d 0

It is important to ensure that your host machine is syncing with a reliable time service to avoid any time skews.
“ 

Cheers
Robert

Comments

  • Anonymous
    March 07, 2012
    Hi Robert, So, based on your idea, what's the best way to handle the time service in a VM holding PDC ? just -- leave the leave Time synchronization enabled & configure the exterinal time source via the following artilce: support.microsoft.com/.../816042 but, how about other member server?

  • Anonymous
    May 23, 2012
    I have the same question.  I have a MEMBER server that is also the HOST for this DC...  

  • Anonymous
    December 17, 2012
    The recommendation for DC's seems to be changed again. technet.microsoft.com/.../virtual_active_directory_domain_controller_virtualization_hyperv(WS.10).aspx updated October 24, 2012: Note: This guidance has been recently updated to reflect the current recommendation to synchronize time for the guest domain controller from only the domain hierarchy, rather than the previous recommendation to partially disable time synchronization between the host system and guest domain controller.

  • Anonymous
    March 11, 2015
    Hi i have domain controller it is virtual machine, i am not able to configure the NTP server  i have tried all the ways. plese help me