Using w32tm to resync all computers on a domain

timew32time

I've noticed the time on all of our computers seems to be off by about 5 minutes. I think most computers are set up to sync time with one of our servers. after running a net time or a w32tm /query /configuration I've found which server they are looking to. I have now gone and set the time on that server to a correct time. Now I am trying to get all the domain computers to resync (something like a w32tm /resync on all computers).

Is this something I have to force? Or will each computer eventually resync by itself? If I wanted to force that, is there a way?

Thanks.

Best Answer

You should not be changing the time source individually for domain computers. By default they will sync with the Domain Controllers in the domain to ensure that Kerberos (and related services) that are time-sensitive function normally. If you want to use an external time source, you should use w32tm to make the Domain Controller holding the PDC Emulator role sync from that source.

That being said, they will sync automatically, assuming your non-domain controller time source is reliable and reachable. If you want to force it, you could always use psexec to force remote computers to run the relevant w32tm command to resync.