NTP Server on a Windows Domain Controller

1. If the DCs are VMs, disable time sync from the hypervisor
2. On the primary DC:

   w32tm /config /manualpeerlist:"time.nrc.ca,0x8 time.chu.nrc.ca,0x8" /syncfromflags:manual /reliable:yes /update
   w32tm /resync /rediscover
   net stop w32time && net start w32time
   w32tm /query /status
   

3. On all other DCs:

   w32tm /config /syncfromflags:DOMHIER /update
   w32tm /resync /nowait
   net stop w32time && net start w32time
   w32tm /query /status
   

4. Verify on all DCs:

   w32tm /monitor