Your event logs indicate that BES server is out of sync with the NTP server (domain controller). Do a query on your W32tm configuration and see which server it's pointing to get it's time. You also mentioned that you recently applied an MS security fix. Check to see if your UDP port 123 is still open for time synchronization traffic.
As a first check...is the time on your dc the same as the BES?