Best practice for external NTP Server on Windows AD network

Solution 1:

The best practice is to disable the Time synchronization Hyper-V Integration Service for all virtual machines that are members of the AD domain.

The best practice is to sync your Hyper-V hosts to the AD domain if they're members of the domain:

net stop w32time
w32tm /unregister
w32tm /register
net start w32time
w32tm /config /syncfromflags:DOMHIER /update
net stop w32time
net start w32time

The best practice is to sync your non-PDCe Domain Controllers to the AD domain:

net stop w32time
w32tm /unregister
w32tm /register
net start w32time
w32tm /config /syncfromflags:DOMHIER /update
net stop w32time
net start w32time

The best practice is to sync your PDCe Domain Controller to an external time source:

net stop w32time
w32tm /unregister
w32tm /register
net start w32time
w32tm.exe /config /manualpeerlist:time.windows.com /syncfromflags:manual /reliable:YES /update
net stop w32time
net start w32time