Add NTP server, cache + intercept

I dont know who is doing DHCP for your network but I recon if the DHCP service doesnt push an NTP server to its clients, the Windows boxes default to using time.windows.com for time.
You could even push an IP instead of name for NTP so it doesnt need to resolve through Pi-hole.