General discussion

Locked

Changing System Time

By pete_may ·
Can anybody see any problems with giving domain users the right to change system time. It'll save me from logging on and doing it for them but this right is restricted to Administrators and server operators by default.
Any comments
Peter

This conversation is currently closed to new comments.

19 total posts (Page 1 of 2)   01 | 02   Next
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Changing System Time

by Bill Cassada In reply to Changing System Time

Yes, if you are using Exchange the timestamp for email is based on the geographic region selected. If a user on the east coast, for example, correctly sets the time for his/her machine, but fails to or incorrectly selects a time zone, then the timestamps will be off on the email for that user. It's not difficult to fix at all, but causes a little confusion sometimes. Other than that I can't think of any dire consequences off the top of my head.

Collapse -

Changing System Time

by pete_may In reply to Changing System Time

Poster rated this answer

Collapse -

Changing System Time

by agibbs In reply to Changing System Time

I certainly don't see any problem with giving your users access to do this, it certainly couldn't hurt much. Before doing so, I would strongly consider using the login script to synchronize workstations with your PDC each time they log in -- just add a line that reads:
net time \\<PDC Servername> /set /yes
into your login script, that will sync the time on the workstation with that on the PDC each time the user logs in.

--Aaron

Collapse -

Changing System Time

by pete_may In reply to Changing System Time

Poster rated this answer

Collapse -

Changing System Time

by nsa13 In reply to Changing System Time

Pete,

Giving users the right to change the system clock and calander won't really effect your security posture and is usually a convinience to your users. While users can mess up there own time/dates and that will have an effect on Exchange emails most users won't be that smart to try something like that.

Anyways, as answered in #2 thats your best solution. But, I think that if you use the net time command that its success is based on a user having either local admin or change system time rights in the domain. So, you would still need to grant the user that right.

Cheers!

Also, if you don't want the PDC to be your central time keeper, you can make it another box, have it RAS to the atomic clock, reset itself and then have your users workstations sync with it. just a thought..

Collapse -

Changing System Time

by pete_may In reply to Changing System Time

Poster rated this answer

Collapse -

Changing System Time

by nsa13 In reply to Changing System Time

Pete,

Giving users the right to change the system clock and calander won't really effect your security posture and is usually a convinience to your users. While users can mess up there own time/dates and that will have an effect on Exchange emails most users won't be that smart to try something like that.

Anyways, as answered in #2 thats your best solution. But, I think that if you use the net time command that its success is based on a user having either local admin or change system time rights in the domain. So, you would still need to grant the user that right.

Cheers!

Also, if you don't want the PDC to be your central time keeper, you can make it another box, have it RAS to the atomic clock, reset itself and then have your users workstations sync with it. just a thought..

Collapse -

Changing System Time

by pete_may In reply to Changing System Time

Poster rated this answer

Collapse -

Changing System Time

by nsa13 In reply to Changing System Time

Pete,

Giving users the right to change the system clock and calander won't really effect your security posture and is usually a convinience to your users. While users can mess up there own time/dates and that will have an effect on Exchange emails most users won't be that smart to try something like that.

Anyways, as answered in #2 thats your best solution. But, I think that if you use the net time command that its success is based on a user having either local admin or change system time rights in the domain. So, you would still need to grant the user that right.

Cheers!

Also, if you don't want the PDC to be your central time keeper, you can make it another box, have it RAS to the atomic clock, reset itself and then have your users workstations sync with it. just a thought..

Collapse -

Changing System Time

by pete_may In reply to Changing System Time

Poster rated this answer

Back to Windows Forum
19 total posts (Page 1 of 2)   01 | 02   Next

Related Discussions

Related Forums