Re: "Hello Network, can i have the time?"

From: Robert Moir (bofh_at_mvps.org)
Date: 12/31/03 

Date: Wed, 31 Dec 2003 15:45:45 -0000

Stephen O'Sullivan wrote:

> There are discrepancies in the network time thats affecting services
> on our Web Server. My question is how do i ensure that both my
> networks have the correct system time set on all servers.
>
> I've thought about how i would do this. My Active Directory
> controllers are setting the times on my internal servers and
> workstations. If i want to allow my web servers get the time from my
> AD controllers i will have to place access-lists on my firewall to
> allow tcp traffic to pass through port 123 from my web server to my
> ad controller - i don't like the sound of that. Its got security
> breach written all over it. Then i've got to figure out where do my
> AD controllers get their time. All these problems.

Buy a couple of atomic clocks. At least one for AD (or one for each AD site
maybe), and one other for your web server/servers.