Recently, PEI had a client that was having constant issue with time synchronization within their domain. All of their systems were consistently 2-5 minutes behind. As Windows administrators know, this can cause many different issues within your organization, ranging from login failures to services unable to start.
By default, all client systems and non-domain controllers point to the domain controllers to receive NTP updates. This works well, but only if your DC is gathering its time from a reliable source. In order to ensure that your domain controllers are receiving their time from a reliable NTP server, you can complete the following commands using PowerShell.
To accomplish this task, Run PowerShell as an administrator. Then, complete the following:
W32tm /config /manualpeerlist:pool.ntp.org /syncfromflags:MANUAL
W32tm /config /update
Andy Shaffer, PEI