General discussion

Locked

Contolling Local Sys Clock from NT4 Dom.

By akbell ·
Hello,

We have an NT4 Domain & have all local PC's locked down, no Admin rights. We want to give users logging into the Domain the ability to change their own clock on their PC,
(NT4 Workstation) I know that I can do this on the local machines user manager as a right, but this would require too much work going machine to machine to change. I've tried to give this right to the Domain Users Group from the PDC, but it has no effect & the user still cannot change it.
I looked in Domain Group Policies, no option to allow computer or users to change Desktop Time.

Any / all help greatly appreciated.

Thanks,

Aaron

This conversation is currently closed to new comments.

7 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Contolling Local Sys Clock from NT4 Dom.

by Rabbit_Runner In reply to Contolling Local Sys Cloc ...

Are you wanting to have each PC set to a different time, or are you simply wanting all PC's to be set to the same exact time?

If it is the latter, then it would be easy to set the workstation clock with a logon script.

The script should be like this....
net time \\<domainserver> /set /y

Each time that a user logs in, the clock will be synchronized with that server.

If you are wanting to accomplish the first idea (see above) then I do not have an immediate suggestion.

Best of luck

Collapse -

Contolling Local Sys Clock from NT4 Dom.

by akbell In reply to Contolling Local Sys Cloc ...

No time sync needed.....
I am wanting users to be able to set / change their own system time if it's incorrect, based on a Domain wide Policy.

Collapse -

Contolling Local Sys Clock from NT4 Dom.

by /dev/null In reply to Contolling Local Sys Cloc ...

I think you have no option but to change this user right on each machine. However this can be automated to a certain degree.

Check-out the Win2K or NT4 Supplement 2 resource kits for the ntrights.exe command. You can grant your domain users theright to 'change system time' on each machine via a batch file. Of course, whoever runs this batch file must have admin rights to each PC. Below are some links to get you started: (remove any spaces that get inserted into the URLs)

SampleBatchFile.bat -
ntrights +r SeSystemtimePrivilege -u DOMAIN\Users -m \\MACHINE1
ntrights +r SeSystemtimePrivilege -u DOMAIN\Users -m \\MACHINE2
etc....

http://www.jsifaq.com/SUBA/tip0200/rh0252.htm

http://support.microsoft.com/default.aspx?scid=kb;EN-US;279664

http://www.winscriptingsolutions.com/Articles/Index.cfm?ArticleID=8188&pg=1&show=578

You can download it here:
http://www.petri.co.il/download_free_reskit_tools.htm


Another option that might be easier from Advanced Software Logic, inc. They sell a GUI utility called "Local User Rights Tool" to change local user rights assignments.
http://www.logicalsoftware.com/Products/tools.htm

Collapse -

Contolling Local Sys Clock from NT4 Dom.

by Gigelul In reply to Contolling Local Sys Cloc ...

"too much work going machine to machine to change"
You tried in UserManager to change the domain to \\ComputerName, and give the necessary rights from your machine?

Collapse -

Contolling Local Sys Clock from NT4 Dom.

by Gigelul In reply to Contolling Local Sys Cloc ...

"ctmoore@myclearwave.net" have right. You will have many problems if yours workstations and server will work with different time setting.

Collapse -

Contolling Local Sys Clock from NT4 Dom.

by BlackDiamond In reply to Contolling Local Sys Cloc ...

Hey,

We added this line to our login script.

ntrights +r SeSystemtimePrivilege -u users

Have not changed anyones right to admin and they can change time. Never had much luck on NT4 setting this through GP or User Manager.

Thanx

Collapse -

Contolling Local Sys Clock from NT4 Dom.

by ctmoore1998 In reply to Contolling Local Sys Cloc ...

I would think it best if you sync'd the workstation clocks with that of the PDC and not only should the workstations be sync but any other member servers should be also. This can be done by adding the following line to your log in script substituting the "SERVER_NAME" for the name of the server you want to sync time with:

NET TIME \\SERVER_NAME /set /yes

The reason you would want all the workstations and member servers in 'time sync' is to prevent file locks based upon file mod/access times.

Back to Windows Forum
7 total posts (Page 1 of 1)  

Related Discussions

Related Forums