Todd,
what do the following commands give you (when run from XP or w2k3):
w32tm /monitor /domain:your_local_domain_name
(i.e. my.domain.local)
w32tm /monitor /computers:name_of_one_of_your_XP_workstations
or, if you want that against local machine:
w32tm /monitor /computers:localhost
?
(or
w32tm -source -v
to check local w2k server or workstation (you'd have to have rights to do
that))
Ideally, you should synch one of your DCs to external time source (local
area public stratum-2 time servers, or you could use time.windows.com),
the rest of your DCs will grab time from the DC that synch to outside...
and, nothing needs to be done to your workstations, they should be fine,
well, providing they run current OSes.
Review this KB:
http://support.microsoft.com/kb/816042 - How to configure
an authoritative time server in Windows Server 2003