Typically the default is for servers and workstations to sync with domain controllers and domain controllers to sync with the domain controller holding the PDC role. You then set the PDC DC to synch with an internet time service.
See this for more details: http://support.microsoft.com/kb/816042
The key to solving time problems is to keep thing simple and keep them as close to default as possible.