All workstations and member servers will get their time from the domain controller for the domain. The domain controller needs to be configured to get it's time from an authoritative time source. This is especially important when your SecureSchool appliance is setup to do NTLM or Kerberos authentication, since the server and SecureSchool must be within 5 minutes of each other. SecureSchool gets it's time from servers in our office, which sync to the US Navy clocks.
SecureSchool, ISBossBox, LibraryDoor, Microsoft Windows
There are two methods of setting the time source for Windows servers. Use the method for the correct server below.
To set your Windows 2003 or Windows 2008 domain controller to sync it's time from SecureSchool, login to your domain controller and go to a command prompt. Now, run the following commands:
- w32tm /config /manualpeerlist:10.0.0.1 /syncfromflags:manual /update (replacing 10.0.0.1 with the IP address of your SecureSchool appliance)
- net stop w32time
- net start w32time
If you have a Windows 2000 server run the following commands:
- net time /setsntp:10.0.0.1 (replacing 10.0.0.1 with the IP address of your SecureSchool appliance)
- net stop w32time
- net start w32time
It is very important that you do this on all your domain controllers, not just some of them. If you do it on only some of them, they will all "fight" about which server really has the correct time.