RE: [ActiveDir] NTP server

[Ulf B. Simon-Weidner]

Title: [ActiveDir] NTP server

Hi Russ,   Yes – you’ll have to configure the PDC-Emulator of the Rootdomain only and reconfigure machines that were configured otherwise to use the default domain behaviour to receive the time again.   Here’s the domain behaviour in a short NG answer I wrote recently: http://groups.google.com/groups?selm=uHjA0eWaEHA.2516%40TK2MSFTNGP10.phx.gbl   You’ll be able to find Stratum 1 Timeserver to use on this website: http://www.eecis.udel.edu/~mills/ntp/clock1a.html   And what I forgot to mention in the NG: Sometimes I’ve seen that a DC which was configured to use another behaviour than NT5DS did not accept the changes of the registry or w32tm command correctly to adjust to the domain behaviour. If this is happening you are able to deregister and register the timeservice again using w32tm /deregister and w32tm /register.   Gruesse - Sincerely,   Ulf B. Simon-Weidner From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rimmerman, Russ Sent: Friday, July 23, 2004 1:26 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] NTP server   So your firewall lets only the PDC emulator go out the NTP port, and all devices including things like Switches and Routers all sync with the PDC emulator as well?    If we have an empty root domain, could we use the PDC emulator in that domain and have all our child domain servers and all other objects go there just as well? -----Original Message----- From: Brian Desmond [mailto:[EMAIL PROTECTED]On Behalf Of Brian Desmond Sent: Thursday, July 22, 2004 8:09 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] NTP server I use my PDC. It syncs with the government. All you rclients automatically talk to the PDC unless you told em not to.   --Brian -----Original Message----- From: Rimmerman, Russ [mailto:[EMAIL PROTECTED] Sent: Thu 7/22/2004 7:24 PM To: '[EMAIL PROTECTED]' Cc: Subject: [ActiveDir] NTP server   Where does everyone have their NTP services come from?  We are getting rid of our current firewall which has NTP on it and everything is pointed to it for NTP services.  Our new firewall won't have NTP built in, so we are going to have to set up an internal NTP server for all our internal hosts to sync to.  Do we put it in the DMZ or the internal network?  Or  does it matter? Do we just install NTP on an existing Win2k server in our DMZ?  What is everyone else doing for NTP? Thanks ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ This e-mail is confidential, may contain proprietary information of the Cooper Cameron Corporation and its operating Divisions and may be confidential or privileged. This e-mail should be read, copied, disseminated and/or used only by the addressee. If you have received this message in error please delete it, together with any attachments, from your system. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ List info   : http://www.activedir.org/mail_list.htm List FAQ    : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ This e-mail is confidential, may contain proprietary information of the Cooper Cameron Corporation and its operating Divisions and may be confidential or privileged. This e-mail should be read, copied, disseminated and/or used only by the addressee. If you have received this message in error please delete it, together with any attachments, from your system. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~