So I inherited this Windows Server 2008 R2 server from an IT contracting firm that, needless to say, was poorly configured. I've managed to clean up most of the other problems they caused but this eludes me to this day.
After a period of time the domain controller stops syncing time with the outside time sources. At the point this happens all workstations and member servers start drifting away from the actual time. If I open a command prompt on any workstation and run w32tm /resync I get an error that states that the time server (the PDC) claimed that it was no longer a reliable source for time information, the exact wording escapes me right now.
The only way I can get the machines to match the correct time is to remote into the PDC, run w32tm /resync on it which completes successfully. After that all the workstations and servers resycn on their own and the everything is good again for a few weeks.
One of the first things I tried was reconfiguring the time sources to be more reliable servers. This problem extended to our Exchange server which was causing authentication issues when people tried to access it. The only way I was able to resolve this was to tell the Exchange server to retrieve its own time from the same outside sources as the PDC. Oddly enough the Exchange server has not had a single problem retrieving the valid time regularly.
The only thing I can think of at this point is to set up a scheduled task to run w32tm /resync every night to ensure that the time is maintained but this is a crappy hack I shouldn't have to do.
Any ideas or suggestions would be greatly appreciated.