Create a Device Level Windows Time Service Configuration Policy

Admins can create a Time Service Configuration policy to configure Network Time Protocol (NTP) servers, polling intervals, and additional time synchronization settings on their Windows devices enrolled in JumpCloud MDM. You can apply this configuration to both individual devices and devices groups.

Creating the Policy

To create a Windows Time Service Configuration policy for Windows devices, do the following:

Selecting the Policy Template

1. Log in to the JumpCloud Admin portal.

2. Go to Device Management > Policy Management. The Policy Management page is displayed.
3. On the Policy Management page, click +Add New.
4. Select Device Policy to assign the policy to devices and device groups. On the New Device Policy page:
   • Select the Windows tab.
   • Search and select the policy name and click Configure. The Details tab of the policy is displayed.
   • On the Details tab, configure the required policy configuration settings.
   • (Optional) In the Policy Name field, enter a new name for the policy or keep the default. Policy names must be unique.
   • (Optional) In the Policy Notes field, enter details such as creation date of the policy, and information on testing and deployment of the policy.

Configuring the Policy

• In the Settings section, select the Enable Windows NTP Client checkbox.
• Select the Configure Windows NTP Client checkbox to configure the required details.

1. Enter the name or IP address of the NTP time source in the NTP Server field.

1. In the Type field, select the type of authentication that W32time uses. NT5DS is selected by default.
2. In the Cross Site Sync Flags dropdown, select the time sources that Windows Time will use from outside its local site.

3. In the Resolve Peer Back off (in minutes) field, specify how long Windows Time should wait before retrying to resolve the time server address after a failed attempt. This is set to 15 mins by default.
4. In the Resolve Peer Back off (attempts) field, specify how many times Windows Time will retry resolving the time server address after a failure. After reaching the limit, it stops attempting to contact the server. This is set to 7 times by default.
5. In the Special Poll Interval (in seconds) field, specify how often the system will synchronize its time with a configured NTP server when using a manual time source. This is set to 1024 seconds by default.
6. In the Event Log Flags, the value 3 is selected by default.

• Select the Enable Windows NTP Server checkbox.

Applying the Policy

• (Optional) Select the Policy Groups tab. Select one or more policy groups where you want to add this policy. 
• Select the Device Groups tab. Select one or more device groups where you want to apply this policy to. For device groups with multiple OS member types, the policy only applies when a user logs into a supported Windows device that is enrolled in MDM.
• Or, select the Devices tab. Select one or more devices where you want to apply this policy.
• Click Create Policy. A success message is displayed indicating the completion of policy creation.

Viewing Policy Status

1. Select the Status tab.
2. To see the last Result Log for a device where this policy is applied, click view.