Yes all the machines has NTP istalled. On the headoffice where i got AD I've done throught windows, but i got small brachs with a poor link and does not have AD there, and I need to block with the SEP.
I'll have a look at the best practices to seen if there is anything wrong!