


Use a batch file with the following commands on the internal computer:.Set the computer to access the proxy server for its NTP server, and configure the proxy to point to the external Time service.To disable the Access Control feature, click to clear the check box. The Enable Access Control check box is located on the Permissions tab in the properties of the Winsock Proxy service in Microsoft Internet Information Services (IIS) Manager. Disable the Access Control feature for the Winsock proxy.To work around this issue, use any of the following methods:
SET PDC TO EXTERNAL TIME SOURCE WINDOWS
This issue occurs because the Windows Time service runs under the local system account on the internal server, and the Access Control feature is enabled on the proxy server. If an external time source is not configured or used for this computer, you may choose to disable the NtpClient." Otherwise, this machine will function as the authoritative time source in the domain hierarchy. Service in the root domain, or manually configure the PDC to synchronize with an external time source. It is recommended that you either configure a reliable time Time Provider NtpClient: This machine is configured to use the domain hierarchy to determine its time source, but it is the PDC emulator for the domain at the root of the forest, so there is no machine above it in the domain hierarchy to use as a time source.

UDP port 123 need to be opened to PDC to get the time. You have to configure external time source for Primary domain controller, this can be a hardware time server or internet time source like. PDC Emulator role can be transferred between domain controllers, so we need to make sure that GPO is applied only to the current holder of the Primary Domain Controller role. At this step, you need to configure your domain controller with the PDC Emulator role to synchronize time with an external source. The NTP server %1 isnt syncd, time not set. Configuring External time source for PDC. Configure NTP Setting on PDC DC Using GPO.
