The following commands are recommended to configure Time Services on Windows 2008 through Windows 2012 R2 domain controllers and member servers.
“Primary” DC (use these commands on the Domain controller with the PDC Emulator FSMO role)
w32tm /config /syncfromflags:manual /manualpeerlist:us.pool.ntp.org /reliable:yes /update
w32tm /resync /rediscover
Note: to determine which server has the PDC Emulator role run the following command: “netdom /query fsmo”
Secondary DC’s and member servers
w32tm /config /syncfromflags:domhier /reliable:no /update
w32tm /resync /rediscover
For non-domain machines like ADFS Proxy:
w32tm /config /syncfromflags:manual /manualpeerlist:us.pool.ntp.org /reliable:no /update
w32tm /resync /rediscover
Resources:
If the server is a VMWare VSphere based VM, you need to configure time related settings in the guest and host.
Dumps time settings from registry (client sent me this not sure if its useful/accurate):
w32tm /dumpreg /subkey:parameters
Check Time Skew:
DCDIAG /TEST:CheckSecurityError
W32TM /MONITOR
See if Time Settings are being controlled by group policy:
W32tm /query /configuration
Do you see all [local] settings? If not that may be an indicator that Group Policy is setting the time settings.