Okay, here's a "stupid" answer that happens to work for us: don't use net time.
In our situation, all of our clients, as well as the domain controllers, have internet access. We run an internet-based client program to synchronize everybody to the atomic clocks in Bethesda, Boulder, or Microsoft-Redmond.
I'm not certain, but I think the network synchronization using net time is only accurate to within 45 ms, and "AtomTime" (
for example, keeps us all well within that window. The gotcha here is that while your network (LAN) will be tightly synced (assuming they are all using the same internet gateway and IP route to the time host), don't go thinking you are in lock-step with the US Navel Observatory: internet latency can count for as much as 500 to 1000 ms!
Net time is supposed to be strait-forward. For the most part, it is. For us, considering we have some "wild" clocks in our LAN's PCs, having a client program that updated straight from the horse's mouth on a frequent (hourly in our case) basis was the right call.
Just a thought, not necessarily a good one.
Regards,
oldschool