Run NET TIME /SETSNTP:uk.pool.ntp.org on your DC. As long as thw windows time service is running on your domain members the rest is done automatically.
I noticed that our Domain controller is off by approximately 5 minutes the other day. Apparently a known "issue" in the environment for some time, when I raised it with my Manager as a potential issue ...