Prevent virtual domain controllers from syncing time against host

by Mitch Tulloch [Published on 17 June 2015 / Last Updated on 17 June 2015]

A tip on why and how you might want to prevent virtual domain controllers from syncing time against host

When the domain controller holding the PDC Emulator FSMO role is a virtual machine on a Hyper-V host and you have the Hyper-V Time Synchronization Service enabled in the guest OS, the host will sync its time with the domain controller running in the guest OS. This can eventually cause them to diverge (skew) however, for example if you restore the virtual machine from a saved state.

The workaround involves two steps. First, use Hyper-V Manager to disable the Hyper-V Time Synchronization Service in the Integration Services for the virtual machine.  Second, run the following REG ADD command at a command prompt:

HKLM\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\VMICTimeProvider /v Enabled /t reg_dword /d 0

I've been informed however that a better solution is simply to ensure that the host syncs its time with a physical domain controller on your network.

Mitch is a ten-time recipient of the Microsoft Most Valuable Professional (MVP) award and a widely recognized expert on Windows Server and cloud computing technologies.  For more information see http://www.mtit.com.

See Also


The Author — Mitch Tulloch

Mitch Tulloch is a well-known expert on Windows Server administration and cloud computing technologies. He has published over a thousand articles on information technology topics and has written, contributed to or been series editor for over 50 books.

Featured Links