Configure Time Service on Windows Server

The following commands are recommended to configure Time Services on Windows 2008 through Windows 2012 R2 domain controllers and member servers.

“Primary” DC (use these commands on the Domain controller with the PDC Emulator FSMO role)
w32tm /config /syncfromflags:manual / /reliable:yes /update
w32tm /resync /rediscover

Note: to determine which server has the PDC Emulator role run the following command: “netdom /query fsmo”

Secondary DC’s and member servers
w32tm /config /syncfromflags:domhier /reliable:no /update
w32tm /resync /rediscover

For non-domain machines like ADFS Proxy:
w32tm /config /syncfromflags:manual / /reliable:no /update
w32tm /resync /rediscover


If the server is a VMWare VSphere based VM, you need to configure time related settings in the guest and host.

Dumps time settings from registry (client sent me this not sure if its useful/accurate):
w32tm /dumpreg /subkey:parameters

Check Time Skew:
DCDIAG /TEST:CheckSecurityError


See if Time Settings are being controlled by group policy:
W32tm /query /configuration
Do you see all [local] settings? If not that may be an indicator that Group Policy is setting the time settings.


Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.