Comment by mcint

It sounds like you may have your solution, but for linux users with similar concerns I'll note:

Not sure if it's available on Windows: `ntpd -g` can perform a big update on first check. https://serverfault.com/a/16513/513049

I was going to mention ntpdate, but in searching I've learned it's been deprecated for a decade, since September 2012, https://serverfault.com/a/16513/513049.