https://aperturezone.com/tags/ntp/ Recent content in NTP on Aperture Zone https://aperturezone.com/logo.webp https://aperturezone.com/logo.webp Hugo -- gohugo.io fr-fr Sun, 05 Jul 2026 00:00:00 +0000 https://aperturezone.com/posts/ntp/ Sun, 05 Jul 2026 00:00:00 +0000 https://aperturezone.com/posts/ntp/ <p>A time synchronization GPO, pushed to <strong>all</strong> my servers back in the Windows Server 2012 days to work around issues/quirks with <code>w32time</code> at the time, forced each machine to query an NTP Chrony server directly, bypassing Active Directory’s native time hierarchy. This workaround survived two migrations (2012 → 2016 → 2022) without ever causing any problems. But it was <strong>never</strong> really sound. The Kerberos hardening in July 2026 (RC4 deprecation, CVE‑2026‑20833) removed this safety net, and ten years of technical debt came to a head in a matter of hours: failed cross-domain authentication, AD replication returning “Access Denied,” and inaccessible shares.</p>