I have recently corrected a problem where we had two DCs acting as the Authoritative time provided in our root Forest domain.
Lets call them PDCe and oldPDC. I have changed oldPDC settings to get time from the domain.
When running this command: w32tm /monitor /domain:domain.net
I get these results (a number of DCs show this):
SomeDC.domain.net
| [x.x.x.x]:
|
|
|
|
|
| ICMP:
| 61ms
| delay.
|
|
|
| NTP:
| -0.0323784s
| offset
| from
| PDCe.domain.net
|
| RefID:
| oldPDC.domain.net
| [x.x.x.x]
|
|
|
My question is what does RefID represent?
Shouldn't the RefID be PDC.domain.net (as most of the DCs are).
This correction was done yesterday and 24 hours should have beed enough time for DCs to perform a timesync and replicate.
I will be running: W32TM /resync /rediscover as it will likely resolve the issue.