You want the PDC Emulator in the root domain to be using NTP and all other DCs to be using NT5DS to sync time. As long as everything is within 5 minutes of each other Kerberos (within the forest realm ...
IIRC windows doesn't run ntp by default, it runs some propretary w32time service instead. I think it has an ntp client built in, but I'm not sure if it can be an NTP server out of the box.
Incorrect time on a Windows device or server can prevent security updates or user authentication, and it can interfere with a forensics investigation. The recent U.S. daylight saving time change ...
Results that may be inaccessible to you are currently showing.
Hide inaccessible results
Feedback