3 replies
by ewgny
I would advise against it, the problem with it, is that if she changes the time, and it is off by more than 5 minutes the next time she logs on kerberos authentication will fail. That said she should be able to change it if she is a local admin or poweruser of her workstation. Which you also would not want due to security reasons. However you may be able to accomplish yor goal by modifying the permissions in the registry on the proper key. Adding her to the permissions and giving her full permission. I'm not sure which ke will do this, but I'm guessing HKLM - Software - Microsoft - Windows- Current Version -Date Time
I have used this method to give a user permission to control the power configuration on their workstation. Software - Microsoft - Windows- Current Version - PowerCfg
by ewgny
Kerberos is required for group policy to work.
Also NTLM2 NTLM and LM authentication should be disabled as soon as it is feasable (when you have just windows 2000 and XP workstations) due to security issues
by maniskid
While Kerberos is a good security protocol, if it fails the backup NTLM protocol will be probably be used which is less secure but will still enable access.
Also, does the DOS command 'time' or 'w32tm' work?
This discussion is closed to new replies.
Trending Windows Forum posts
Sort by Trending