https://www.grouppolicy.biz/2010/09/fixing-active-directory-time-sync-issues/