I recently blogged about time and how critical it is in a domain environment. Just this morning I read a post from the Directory Services Team that shows how to configure WMI Filtering through Group Policy to ensure that the PDC Emulator always has the right time configuration. You need to read through this post really consider implementing a similar policy into your environment.
The only portion that is missing from that post is the location of the W32Time settings in Group Policy. The policy you will be configuring is located under the Computer ConfigurationAdministrative TemplatesSystemWindows Time ServiceTime ProvidersConfigure Windows NTP Client
After you enable it you will want to change the default setting from NT5DS (which means find and sync with the PDCe) to NTP. This is because we are configuring this for our PDCe which should be pointing to a reliable time source (internal or external). You will also configure the location to that reliable source in the NTPServer dialog box.
I haven’t seen a great tip like this in some time. This is one of those great little finds and I hope you enjoy it.