How do I let a user change the Time on their NT 3

[DougP]

How do I let a user change the Time on their NT?
Is there a group I should add them in?

Now we have to log in as Administrator to change the time

TIA
DougP, MCP

 

[thatrenowned]

Is it just a specific group of people who need to change the time on their computer, or is it just in general so that the time is correct on all computers?

If this is the case, you could get all your workstations to set the time to that of your server. This seems to be the best thing to do because why would whoever need to change the time?

 

[DougP]

Anyone????
Whoever?
How do I do any of it????
give me a step by step DougP, MCP

 

[AlexIT]

Look at couple of utilities like Domain Time or something, they simplify the process of getting (and keeping) all those clocks at the same time.

Alex

 

[DougP]

No people we are way off track.
If I log in as Administrator I can change the System time.
If I log in as User1 I cannot. I get an error saying "no Permission to change time".
What User group, local or global does User1 need to be added to so here can change the time on his NT workstation.
DougP, MCP

 

[jaeddy]

User Manager>Policies>User Rights>Change the system time

 

[DougP]

Yep
Right Answer
Thanks a Million

how 'bout a star !!!!

DougP, MCP

 

[DougP]

Still have the time problem.
I added the user to the Change time policy and they still connot change the time. They rebooted and every thing.
I moved them to differeent groups. Domain Users, domain Admins Still does not work.
Even if I put them in the Administrators group it does not work. I'm really beside myself on this one.

We don't use polices here do I have to create one???

DougP, MCP

 

[jaeddy]

Did you add a local user account, or a domain account? It really sounds as if ther is a policy issue here.

 

[DougP]

I am at the PDC. I opened User Manager for Domains.
I clicked "Policies" Menu
"User rights"
Then clicked the "Rights" drop down and found "Change the system Time"
then I Click "Add" button clicked show all users button.
Found him in the list
added him
told him to re-boot

Then I went to his user account in user manager for domains and to "Groups" clicked Administrators
told him to re-boot again
Still does not work.


DougP, MCP

 

[mcconmw]

You need to add the permission at the machine that the user is wanting to change the time on. You have given the user the right to change the server time on any DC in your domain, but not individual PCs or member servers.

 

[DougP]

So I do that at the PC
Login in as Admin
and go to user manager ????

Man, its been so long since MCP NT classes. DougP, MCP

 

[mcconmw]

Yep

 

[DougP]

Ok great we can put this too rest I just did that and he can now change the time.

So to recap the user fisrt needs to be given permission on the Server then the PC???
Or can we leave off the server permission and just do the PC??


DougP, MCP

 

[mcconmw]

Leave off the server....The right is only effective on the machine it is granted on. In the case of a DC it is effective on all DCs. You don't want him to change the time on your servers.

 

[jaeddy]

Another point, just a bit of finesse on the issue- you can launch User Manager for Domains on the DC (or any server for that matter), go to User>Select Domain and type in \\computername to open user manager on that local machine. Keeps you from having to schlep on over to where the PC is located and lets you call the user and say mysterious things such as "Log out and back in and you should be fine now."

 

[AlexIT]

Good point Jaeddy! We all need to be more mysterious to our users (turn knob first then push or pull, as required, to open door...)

Alex

 

[kpetursson]

The mysterious messages to users. from where do you send them?

kpetursson

 

[jaeddy]

from any machine in the domain. Look at the "net send" command

 

[lifegard2]

Star to jeaddy on that one!! Now, can anyone tell me how to implement this policy system wide without visiting each user's PC or accessing each individual PC through User manager? I need to restrict access, rather than grant, to system time on my users PCs. Apparently, NT, by default, only allows members of the local Administrators group to do this, but Win2k allows members of the power users group to do this.