Windows Forum

Ask something
Discussion Locked

synchronizing system time with DC

0 helpful
11 replies

by yarik

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
To synchronize time with DC for workstations during login we run "net time \\Server_name /set /yes". But neither form "run" key in registry nor directly from login script this doesn't work when user isn't a member of Administrators group on machine where he is logging in. We have applied some corporate security standards in a bulc and it looks like entries in "run" are running under user account, not under SYSTEM. Can it be set somewhere? Thanks

11 replies

by yarik

Thanks Tim, will have a look, but unfortunately we are using NT (that's why the question was posted under NT category :)

by timthetoolman

Hi,

Sorry about that. I generally look at the questions in the "all questions" view and didn't notice you were on NT...

It occurs to me that you could use the task scheduler to do this under the admin account - although it wouldn't specifically be when the logged in.

Cheers,
Tim.

by Former member

By default, only members of the Administrator and Power User groups can change the system time on a workstation. This is controlled by the User Right Change the system time. To grant the right to the ordinary users group or a specific account:

Start/Programs/Administrative Toos/User Manager
Select Policies
Select User Rights
Select Change the system time from the drop down
Click Add to include the ordinary users group or select a specific account to grant the right.
If you have a large number of individual account you want to grant various User Rights, you can Server Resource Kit utility ntrights.exe at the commandline. A syntax example is:

ntrights +r SeSystemtimePrivilege -u domainormachinename\accountorgroup See the resource kit documentation for user rights syntax.

by yarik

Thanks, but the thing is that by corporate policy users aren't allowed to change system time. The intention was to run "net time" under "System" account which I'm not sure how to implement.

by oskiller

An easier way to handle time sync would be to install W32TIME on the server and the workstations. Set the server up as a timesync server, and have the workstations check their time against it every so often. Runs in the background and I haven't had a problem with it. Runs as a service so it is blind to the users.

by l lynch

I had the same problem. The problem is the permissions on the workstations is set for Administrators only to change the system time.
You will need to add a group that everyone belongs to one each of the Workstations. You don't have to go to each workstation individually. You can use the Domain User Manager, User, Select Domain, type in the workstation name. Once connected to the Workstations Local User Manager, Policies, Users Rights, tick Show Advanced User Rights, Changing System Time and add the group. Unfortunately you will have to do this for every Workstation. It took me 25 minutes to make this alteration to 75 workstations at 3 offices.

This discussion is closed to new replies.