often, I’m getting asked how to configure Time Synchronization for Hyper-V VM’s that run the Domain Controller (DC) Role. Our original recommendation was to disable the time synchronization and leave it up to the DC’s own functionality to synchronize time with other DC’s.
On the other hand, we also have our PM Bens correct recommendation that there is ‘Never’ a reason to do so. (Question#8)http://blogs.msdn.com/b/virtual_pc_guy/archive/2010/11/19/time-synchronization-in-hyper-v.aspx
Now, just recently I found that our technet article now actually recommends to partially disable time synchronization: http://technet.microsoft.com/en-us/library/virtual_active_directory_domain_controller_virtualization_hyperv(WS.10).aspx
“To partially disable the Hyper-V time synchronization provider, leave Time synchronization enabled under Integration Services and run the following command from an elevated command prompt on the guest domain controller: reg add HKLM\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\VMICTimeProvider /v Enabled /t reg_dword /d 0
It is important to ensure that your host machine is syncing with a reliable time service to avoid any time skews.“
So, based on your idea, what's the best way to handle the time service in a VM holding PDC ?
just -- leave the leave Time synchronization enabled & configure the exterinal time source via the following artilce:
but, how about other member server?
I have the same question. I have a MEMBER server that is also the HOST for this DC...
The recommendation for DC's seems to be changed again.
technet.microsoft.com/.../virtual_active_directory_domain_controller_virtualization_hyperv(WS.10).aspx updated October 24, 2012:
Note: This guidance has been recently updated to reflect the current recommendation to synchronize time for the guest domain controller from only the domain hierarchy, rather than the previous recommendation to partially disable time synchronization between the host system and guest domain controller.