As stated in the headline our Domain Controller runs on Windows Server. This server is a Hyper-V Guest. The Hyper-V Host is joined to the Domain.
Unfortunately the Time on the Domain Controller is off by a couple of minutes. As a result all clients in our Domain have a wrong Windows Time.
How can this (time-synchronization) be fixed?
The Time synchronization Integration Service should be disabled on all domain members that are virtual machines running under Hyper-V, not just the DC. Your PDCe should be configured to sync time with a reliable external time source.
On boot up, the virtual machines will get their time from the Hyper-V host (because they have no RTC of their own) and from that point forward they should be syncing their time from the domain hierarchy.
From an elevated command prompt on the domain members run
w32tm /query /source
and make sure that the source is your PDCe. Then runw32tm /query /configuration
and make sure the type is NT5DS.From an elevated command prompt on the PDCe run
w32tm /query /source
and make sure that the source is a reliable external time source. Then runw32tm /query /configuration
and make sure the type is NTP.The standard setup is to disable the time service on the domain controller and set it up to get an external time.
https://technet.microsoft.com/en-us/library/cc784553(v=ws.10).aspx Describes the steps. This is pretty imperative as otherwise you alck any decent time source (no, computers have lousy clocks).
If you do that properly, you break the host/client time loop and all machines should get the proper time.