Enforce strong, unique passwords for computer accounts, regularly rotate them, and consider implementing NTP authentication mechanisms such as symmetric keys or Network Time Security (NTS) to prevent unauthenticated queries.
You configure your Primary Domain Controller (PDC) Emulator to sync with a reliable external time source (like NIST or Pool.ntp.org).
Instead of cracking or updating an NTS server, consider the following alternatives: