Your company has two Active Directory Domain Services （AD DS） domains， Domain1 and Domain2. A two-way trust relationship exists between the domains. Users in both domains can log on to client computers in only their own domains. System logs on the domain controllers display the error message "Clock skew too great" when users in Domain1 attempt to log on to client computers in Domain2. You need to ensure that users can log on to client computers in both domains. What should you do？（）

A. Run a startup script that includes Net Time /querysntp on all client computers.
B. Run a startup script that includes Net Time /setsntp on all client computers.
Configure the primary domain controller （PDC） emulator in each domain to synchronize its clock with the same external time source.
Decrease the Maximum tolerance for computer clock synchronization setting in the default Domain Group Policy object （GPO）.