Time editing ?

[MrIPO]

Hi I hoping somebody can help me.

I am a administrator of a small offcie network.

All users are standard domain users, however 2 of the client profiles need to be able to change the date and time for there accounting application. Currenty I have made there domain accounts meneber of power users on the local pc's however I want them to only be domain users and not have power user rights.

How can I configure AD so that they have user rights but allow them to change the date and time. I would say this can be done trough policy but how

Cheers in advance

 

[penauroth]

If you use login scripts what you can do is incorporate a control mechanism to prompt the user the date and time and modify the date according to their input.

I believe login scripts run under the security context of the administrator.

Paul

Work on Windows, play on Linux.

 

[raythefire]

Adds a user called AUTHENTICATED USERS in the workstation Administrator Group. When typed in click check which should underline it then OK. This allows more rights than power users when connected to and logging on to a domain. Some programs require this to run on the Workstation. Note when adding the user in the add user box make sure the locations box is pointing to the Workstation Name not the Sever. Right click My Computer > Manage > Local Users and Groups > Groups > Administrators

 

[mlichstein]

You need to be careful with allowing people to change the time on their systems. If the time gets out of sync by more than 5 minutes in either direction, Kerberos authentication will stop.