BPA for AD Server 2008 and 2008 R2 DCs W32Time setting complaint

I have been going through some of the warnings raised by BPA against our DCs to make sure everything is as it should be.

Everything has been going well until I got to the following warnings:

The value of MaxNegPhaseCorrection on the domain controller ********* should be equal to 48 hours

And:

The value of MaxPosPhaseCorrection on the domain controller ********* should be equal to 48 hours

I looked at the article on technet and it states that the registry setting under

HKLM\SYSTEM\CurrentControlSet\Services\W32Time\Config\MaxPosPhaseCorrection 

should be equal to 172800.

From what I have seen every DC I have checked has this registry setting set to 172800. Is the BPA complaining that it is not applied via GPO? Or is there something else wrong here that I should be looking at?

Solution 1:

My opinion is that you should not mess with any of those esoteric reg entries such as MaxNegPhaseCorrection at all. Your forest root PDCe should sync with a trusted external time source, and all other Windows clients and servers should be left at default. Use w32tm /unregister and w32tm /register to return all the settings to defaults. Run Windows Update and ensure BPA rules are up to date. It is not necessary to have any Windows Time settings defined via GPO and it is often unnecessary to do so.