Configuring NTP on Windows Using GPO

In short, here's how to configure NTP using GPO

In Active Directory, the PDC Emulator should get the time from an external time source and then all member computers of this domain will get the correct time. Since the PDC Emulator can move around, we make sure the GPO is applied only to the current PDC Emulator using a WMI filter.

1. Go to the WMI Filters section in GPMC and create a new filter like the following:

Here's the query for you to cut'n'paste: Select * from Win32_ComputerSystem where DomainRole = 5

2. Create a GPO and apply it to the Domain Controllers OU with the following settings: Computer Configuration/Policies/Administrative Templates/System/Windows Time Service/Time Providers

3. Assign the WMI Filter to the GPO.

That's done! Happy NTP syncing.