We have been recommended to sync our networking-equipment to one of our Dc's
(not the PDCEmulator itself).
However my boss has stated that our DC's has plenty of workload, and furthermore
that our PDC synchronizes against a public pool of DNS-stratum-2 servers, which,
acording to MIT-analysis, seem to be inaccurate or unavailable to a certain degree.
He says that all our firewalls etc. need very precise timing and recommends
that we buy a standalone appliance ntp-server and synchronizes all of our
networking equipment against that one.
But in doing so, it occurs to me that our networking equipment and the rest
of our domain (clients, servers etc) could be disagreeing on what the time
is, and if i am understanding this topic correctly, this is NOT
recommended - having 2 different NTPsources.
What is best practice if we do not want to synchronise against our Pdc's or
Dc's due to risk of overloading them...???
I am very gratefull for you kindness and hope for an answer.