What is the best way to allow users to change the time on their computers? I can go around manually and log in as admin and goto the user manager on each machine and allow them to change the time by changing the policies. <br><br>I was running this command "net time /DOMAIN:ALEXANDERCENTRE /set /yes" which works great if you are logged in as admin. I was wondering if I could setup a group in the domain that would allow the members to change the time. Actually my idea was to elliminate the user and have a batch file with the above command run via the "at" command. <br><br>Is there a better way to do this? <p>Troy Williams B.Eng.<br><a href=mailto:fenris@hotmail.com>fenris@hotmail.com</a><br><a href= > </a><br>
Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations wOOdy-Soft on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
Best way to allow users to change the time on their computers
- Thread starter fenris
- Start date
- Thread starter
- #3
Will that work even if the users don't have permission to change the time on the computer that they are using? The problem is the command that I want to use requires the user to have access to changing the time on the computer. Is there an alternative to this command that could be used. <p>Troy Williams B.Eng.<br><a href=mailto:fenris@hotmail.com>fenris@hotmail.com</a><br><a href= > </a><br>
MasterRacker
Active member
I don't think a login script will work if the user account doesn't have time change permissions. Anything running under the scheduler service will run under system level security so that should work. <p> Jeff<br><a href=mailto: masterracker@hotmail.com> masterracker@hotmail.com</a><br><a href= > </a><br> Of all the things I've lost in life, I miss my mind the most ...
- Thread starter
- #6
MasterRacker, I was hoping someone would say that about the AT command. I will have to test it out as I am too lazy 
to go around to every computer and manually allow the user to change the time. Besides I thought computers where supposed to make life easier, including the admin's.<br><br> <p>Troy Williams B.Eng.<br><a href=mailto:fenris@hotmail.com>fenris@hotmail.com</a><br><a href= > </a><br>
to go around to every computer and manually allow the user to change the time. Besides I thought computers where supposed to make life easier, including the admin's.<br><br> <p>Troy Williams B.Eng.<br><a href=mailto:fenris@hotmail.com>fenris@hotmail.com</a><br><a href= > </a><br>I have a way to do this via the command line, you set the scheule to start with the correct rights and you could run it on everybodys machine. Unfortunately I can't figure it out right now. I have the details at home and will drop a post here over the weekend or on Monday.
You could setup your users into a global group (in User Manager for domains), and add this global group into the Power Users group on each local machine. This allows the user to update the date and time through the logon script each time they log on.
Sorry it took me so long to get back to you, things been a bit crazy over the last bit.
the command I used to do this is
ntrights -u everyone +r sesystemtimeprivilege
it adds the everyone group to the set system time priv. on the local machine.
you will need the ntrights.exe and a little batch file to copy it to the local machine, then schudlue it via AT
I think ntrights.exe is part of the res kit. If you can't find it let me know.
the command I used to do this is
ntrights -u everyone +r sesystemtimeprivilege
it adds the everyone group to the set system time priv. on the local machine.
you will need the ntrights.exe and a little batch file to copy it to the local machine, then schudlue it via AT
I think ntrights.exe is part of the res kit. If you can't find it let me know.
- Thread starter
- #10
Is there another way to achieve this.
In our company we disabled (within the policy) the right for useres to change te system time.
But how can I synchronise the time of a workstation when a users logs in on that workstation.
The net Time command would not work because the user is not a admin or local admin (and he never will be).
The NTrights would also nit work because you must be a admin user.
Help
Greetings Ron
In our company we disabled (within the policy) the right for useres to change te system time.
But how can I synchronise the time of a workstation when a users logs in on that workstation.
The net Time command would not work because the user is not a admin or local admin (and he never will be).
The NTrights would also nit work because you must be a admin user.
Help
Greetings Ron
There is a way to sync the workstation clock with a network clock. This method will prevent the admin from logging in and syncs the clocks on startup. Then, only the network clock has to be maintained. Unfortunately, I don't have all of the details with me right now. I will try to dig them out and post the solution. I think that I found these instructions somewhere on the microsoft site.
We had a similar problem; users time cannot be updated because they are not local administrators.
Is there anyway to change the permission to allow them to change the time remotely without visiting each workstation to logon as a admin?
From my understanding of AT is I would have to make an AT command for each machine
Or to give them permissions to change time go to each machine and logon as someone that has local admin access, running that permission change line in the logon script would not work for the normal users
Please correct me if I am wrong but that’s how I read it.
Is there anyway to change the permission to allow them to change the time remotely without visiting each workstation to logon as a admin?
From my understanding of AT is I would have to make an AT command for each machine
Or to give them permissions to change time go to each machine and logon as someone that has local admin access, running that permission change line in the logon script would not work for the normal users
Please correct me if I am wrong but that’s how I read it.
You can use User Manager for Domains and "select domain" and type in the name of the local computer. Then you can change the policies to give users the right to change time locally. Kind of a pain because you have to do it one by one, but at least you can do it from your workstation
OK, so it's been a year, hear's more info:
There is a service that is included in Win2k called w32time. It is available for NT as well (w32time replaces TimeServ that was in the res kit.) We run it at my company and have it setup rather nicely.
provides setup and download info for w32time. The only note I would add to their directions is that you need to set your Primary Time Servers LocalNTP setting to "LocalNTP=YES" in order to get your domain to sync properly. Additionally, you may need to enable your firewall to allow NTP to passthrough.
Our Master Time Server syncs time hourly with an NTP server on the web. The Primary Time Servers sync time with the Master Time Server. Lastly, the workstations all sync time with the Master Time Controllers.
It took a little trial and error getting it set up, but now we are all on the same time and it's rather nice. It makes looking at event logs for two machines somewhat easier. Now I can see two events happening on separate servers within close time to one another and tell if they are related or not. Just one use. . .
There is a service that is included in Win2k called w32time. It is available for NT as well (w32time replaces TimeServ that was in the res kit.) We run it at my company and have it setup rather nicely.
provides setup and download info for w32time. The only note I would add to their directions is that you need to set your Primary Time Servers LocalNTP setting to "LocalNTP=YES" in order to get your domain to sync properly. Additionally, you may need to enable your firewall to allow NTP to passthrough.
Our Master Time Server syncs time hourly with an NTP server on the web. The Primary Time Servers sync time with the Master Time Server. Lastly, the workstations all sync time with the Master Time Controllers.
It took a little trial and error getting it set up, but now we are all on the same time and it's rather nice. It makes looking at event logs for two machines somewhat easier. Now I can see two events happening on separate servers within close time to one another and tell if they are related or not. Just one use. . .
- Status
Similar threads