sntp - fixing time issues within a windows domian
I’ve had some problems with dcdiag failing on the advertising check, and this relates back to the DC not getting its time from the PDCE properly.
Fixing timesync is different according to the machine type…
If it’s a standard Domain Controller then behave as if its a member server (below)
If it’s a PDCEmulator then make sure you allow port 123TCP/UDP outbound on your firewall and configure the external sntp site by entering this at the command line (note: i use pool.ntp.org instead of default microsoft sntp)