Time synchronization in AD via NTP - server, what's wrong?

Question

Active Directory

Colleagues, welcome. I have:
wine server 2008r2, ntp server on debian, directory service for 150+ users.
I did all the settings for time synchronization, but when synchronizing via the w32tm
/resync /rediscover
command , it says
"Sending a synchronization command to the local computer
The following error was detected: Access denied. <0x80070005> The
question is what? how to
check this ?
But this is only on my test machine, how can I find out if other machines have pulled up through my ntp server?
(I can go and see in principle, but are there any other options?)

Answer 1

The w32tm command needs to be run in cmd under admin rights, hence the access error.
And so I think there should be some kind of logs on the ntp server if you configured it correctly. Look in the logs to see if clients are connecting to it.

Answer 2

If AD is available, only the PDC Emulator of the forest root domain should take data from an external time source.
And everything else will be distributed by the internal service of time.