Hi,
some machine in my domains, upgraded to Windows 10, lost correct date and roll back to an old date.
They have as time source the domain controller, that sync with external ntp.
I see event id and i found a kernel-general id 1.