Troubleshooting Windows Time Sync Issues

Incorrect system time causes Kerberos authentication failures, certificate errors, and MFA issues. Windows syncs time via NTP (Network Time Protocol), defaulting to time.windows.com for standalone machines and to the domain controller for domain-joined machines. To manually sync time: Settings > Time & Language > Date & time > Sync now. If this fails, open an elevated command prompt and run: 'w32tm /resync'. To check sync status: 'w32tm /query /status'. For domain environments, configure an authoritative time source on the PDC Emulator domain controller. The PDC should sync from a reliable external NTP source (e.g., pool.ntp.org). All other DCs and domain members sync from the domain hierarchy. A common issue is virtual machines with frozen or drifting clocks — ensure VMware/Hyper-V time sync settings are configured correctly alongside Windows time service.