Time accuracy is important for AD infrastructures to maintain Kerberos authentication between users and domain controllers. Currently, the time accuracy between two parties should be less than 5 minutes. In an AD environment, domain members sync time with domain controllers (that is, the Primary Domain Controller (PDC), a domain controller in the root forest, or a domain controller with the good time server, or GTIMESERV, flag) to maintain accurate time across the environment.
However, sometimes, this doesn't work as expected. As an example, virtual servers sync time with their hosts, which can cause accuracy issues. Depending on the network topology, the reply packets for time requests can take longer to reach the requester. This can also cause accuracy issues between the domain controller and the client. Mobile devices and laptops may not connect...
