S
stan drews
Hi guys.
I have asked a previous question WRT NTP settings and the answers were very helpful. I have another query on the same topic which I would be grateful of your comments on.
Our setup: 2 x 2016 virtualised DCs, 4 x 2016 virtualised member servers, 2 x domain joined HyperV hosts, 25 workstations. In addition we have 2 x NTP hardware clocks.
I am happy with configuring the DC with the PDCe role to use the IPs of the 2 hardware clocks as its time source and then by default allow all other domain members to use the domain hierachy to obtain their time, however an additional requirement has now surfaced. The customer would like the domain to continue to be time synced to the hardware clocks in the event of a single DC failure without having to transfer/seize the FSMO roles from the failed DC and are suggesting that both DCs are configured to obtain their time from the hardware clocks. It is my understanding that only the PDCe should be configured to an external time source with the rest of the domain (including the 2nd DC) using domhier synchronisation.
My questions are:
Thanks in advance - hoping someone can provide some greatly needed advice on this.
Mat
Continue reading...
I have asked a previous question WRT NTP settings and the answers were very helpful. I have another query on the same topic which I would be grateful of your comments on.
Our setup: 2 x 2016 virtualised DCs, 4 x 2016 virtualised member servers, 2 x domain joined HyperV hosts, 25 workstations. In addition we have 2 x NTP hardware clocks.
I am happy with configuring the DC with the PDCe role to use the IPs of the 2 hardware clocks as its time source and then by default allow all other domain members to use the domain hierachy to obtain their time, however an additional requirement has now surfaced. The customer would like the domain to continue to be time synced to the hardware clocks in the event of a single DC failure without having to transfer/seize the FSMO roles from the failed DC and are suggesting that both DCs are configured to obtain their time from the hardware clocks. It is my understanding that only the PDCe should be configured to an external time source with the rest of the domain (including the 2nd DC) using domhier synchronisation.
My questions are:
- Is it possible / and appropriate to configure both DCs to sync directly to the hardware clocks, even though only 1 has the PDCe role? Therefore ultimately making both DCs authoritative time sources for the domain.
- If possible, how would I eliminate the DCs syncing to different hardware clocks as each would be configured with the IP addresses of both clocks?
- How would I configure the DC time settings to achieve questions 1 & 2?
Thanks in advance - hoping someone can provide some greatly needed advice on this.
Mat
Continue reading...