...
# Domain controllers as NTP-servers
# 
server dc01.holding.com iburst
server dc02.holding.com iburst
...
# Don`t run network server
#  
bindcmdaddress 127.0.0.1