We use a logon script to synchronize our XP workstations with a NT server. When any domain user logs in to the domain the script runs. Until recently I just assumed everything was good. One of our XP workstations was 15 min off.
When a user without admin rights logs onto this workstation (call it XP1) the script doesn’t reset the time. Of course if you have admin rights on the domain it does. Now on the workstation next to it (call it XP2) the logon script runs fine and the time is synchronized for any domain user.
OK, so next I look in ‘Administrative Tools’ => ‘Local Security Policy’ => ‘Local Policies’ => ‘User Rights Assignments’ => ‘Change the System Time’. The values in both XP1 and XP2 are Administrators, Power Users. This seems to be the default setting. Fine, but the non administrator can change the time on XP2 and not on XP1!
Is there another setting I’m missing? I’ve been googling for it but keep coming back to the Change System Time setting. My boss doesn’t really want to allow users the permission. We are looking at other ways to synchronize the workstations.
BTW: Yes, I rebooted XP1 just for fun. Looking in Network Places on XP1 you can see the network just fine. The NT permissions on the server script are Everyone – Read.
