Yo Motherboard

Should the AD PDC Emulator Use an External NTP Source?

September 7, 2026 4 answers
Asked by MellowCedar42
Our Active Directory environment currently shows the time source as "Free-running System Clock." We've noticed that domain-managed laptops are about one minute different from the time displayed on phones, and I need to correct the issue. Should the forest-root PDC Emulator be configured to use an external NTP source, and how should the other domain controllers and clients be configured?
Active Directory Domain Controllers NTP PDC emulator System Operations time synchronization Windows Server

Answers

NimbleHarbor6
If your FSMO roles might move, consider using policy or automation so whichever domain controller holds the PDC Emulator role uses the external source, while the other DCs use the domain hierarchy. A one-minute difference is much larger than expected, so also verify the current PDC configuration, network access to NTP, virtualization settings, and the time source used by your phones.
Reply to this answer
RiverKite88
A common setup is to configure the PDC Emulator with several pool.ntp.org peers or another trusted NTP service, then mark it as the reliable time source. The remaining domain controllers should sync from the PDC, and workstations should continue syncing through the domain hierarchy. Also check that UDP port 123 is allowed through firewalls and VPNs.
Reply to this answer
CopperLynx31
Make sure virtualization isn’t creating competing time sources. Domain controller VMs should not simultaneously sync from the hypervisor and from the AD time hierarchy; disable guest-to-host time synchronization where appropriate. If the PDC itself is virtualized, ensure the virtualization platform and its host are configured carefully so they don’t fight the NTP configuration.
Reply to this answer
QuietOrbit7
Yes. The PDC Emulator should normally synchronize with one or more reliable external NTP sources, while the other domain controllers and domain members continue using the normal Active Directory time hierarchy. Use multiple peers rather than relying on a single server, and choose non-smearing sources that are appropriate for your region.
Reply to this answer

Add your answer

Answers are reviewed before publication.

Related Discussions