Didn't disable Time (as it's kinda important) but was running Dimension 4 to keep better time, and reviewing the time service, it was indeed disabled. I've started it, but further testing I suspect the server isn't letting time requests through (UDP 123). Open on the firewall, and a Win10 machine will update it's time with net time, but a Unifi USG (Linux based) won't update either... so I did some more digging on the Server 2016 DC.
Easiest step is turning off the firewall to begin with (is it ruining your life). Yep. Double check NTP rule (it's a default one), couldn't see anything amiss (right scope, port, all profiles - domain/private/public) but wrote a new rule anyway. Sure enough, FreeNAS could now add the IP as an NTP server (and the Unifi USG was also happy). Not sure exactly what I need to run in shell, but using "ntpdate -q IPofServer" got me "no server suitable for sync..."
Then I went back to Directory Services / Active Directory, and it joined to the domain successfully (firewall on and off), so thanks anodos! Using the Monitor in the top right of the webGUI and it shows Active Directory as Healthy.
Chucked in all the steps I did in case it helps someone else.
(off to bed as it's almost 0130, but will check in tomorrow)
Easiest step is turning off the firewall to begin with (is it ruining your life). Yep. Double check NTP rule (it's a default one), couldn't see anything amiss (right scope, port, all profiles - domain/private/public) but wrote a new rule anyway. Sure enough, FreeNAS could now add the IP as an NTP server (and the Unifi USG was also happy). Not sure exactly what I need to run in shell, but using "ntpdate -q IPofServer" got me "no server suitable for sync..."
Then I went back to Directory Services / Active Directory, and it joined to the domain successfully (firewall on and off), so thanks anodos! Using the Monitor in the top right of the webGUI and it shows Active Directory as Healthy.
Chucked in all the steps I did in case it helps someone else.
(off to bed as it's almost 0130, but will check in tomorrow)
Last edited: