Where would a Microsoft Windows administrator change and manage the maximum Kerberos time skew?

Where would a Microsoft Windows administrator change and manage the maximum Kerberos time
skew?

A.
Active Directory domains and trusts

B.
GPO

C.
NTP

D.
Windows Time Service