[zdw]

NTP settings can be distributed by DHCP, which in a managed networked environment should be reasonably trustable.

Unfortunately Windows ignores this, and also sets the system clock to a timezone-specific time, not UTC as nearly all other OS's do.