Windows Forum

Ask something
Discussion Locked

Contolling Local Sys Clock from NT4 Dom.

0 helpful
7 replies

by akbell 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hello,

We have an NT4 Domain & have all local PC's locked down, no Admin rights. We want to give users logging into the Domain the ability to change their own clock on their PC,
(NT4 Workstation) I know that I can do this on the local machines user manager as a right, but this would require too much work going machine to machine to change. I've tried to give this right to the Domain Users Group from the PDC, but it has no effect & the user still cannot change it.
I looked in Domain Group Policies, no option to allow computer or users to change Desktop Time.

Any / all help greatly appreciated.

Thanks,

Aaron

7 replies

by rabbit_runner

Are you wanting to have each PC set to a different time, or are you simply wanting all PC's to be set to the same exact time?

If it is the latter, then it would be easy to set the workstation clock with a logon script.

The script should be like this....
net time \\ /set /y

Each time that a user logs in, the clock will be synchronized with that server.

If you are wanting to accomplish the first idea (see above) then I do not have an immediate suggestion.

Best of luck

by akbell

No time sync needed.....
I am wanting users to be able to set / change their own system time if it's incorrect, based on a Domain wide Policy.

by /dev/null

I think you have no option but to change this user right on each machine. However this can be automated to a certain degree.

Check-out the Win2K or NT4 Supplement 2 resource kits for the ntrights.exe command. You can grant your domain users theright to 'change system time' on each machine via a batch file. Of course, whoever runs this batch file must have admin rights to each PC. Below are some links to get you started: (remove any spaces that get inserted into the URLs)

SampleBatchFile.bat -
ntrights +r SeSystemtimePrivilege -u DOMAIN\Users -m \\MACHINE1
ntrights +r SeSystemtimePrivilege -u DOMAIN\Users -m \\MACHINE2
etc....

http://www.jsifaq.com/SUBA/tip0200/rh0252.htm

http://support.microsoft.com/default.aspx?scid=kb;EN-US;279664

http://www.winscriptingsolutions.com/Articles/Index.cfm?ArticleID=8188&pg=1&show=578

You can download it here:
http://www.petri.co.il/download_free_reskit_tools.htm

Another option that might be easier from Advanced Software Logic, inc. They sell a GUI utility called "Local User Rights Tool" to change local user rights assignments.
http://www.logicalsoftware.com/Products/tools.htm

by gigelul

"too much work going machine to machine to change"
You tried in UserManager to change the domain to \\ComputerName, and give the necessary rights from your machine?

by gigelul

"ctmoore@myclearwave.net" have right. You will have many problems if yours workstations and server will work with different time setting.

by blackdiamond

Hey,

We added this line to our login script.

ntrights +r SeSystemtimePrivilege -u users

Have not changed anyones right to admin and they can change time. Never had much luck on NT4 setting this through GP or User Manager.

Thanx

by ctmoore1998

I would think it best if you sync'd the workstation clocks with that of the PDC and not only should the workstations be sync but any other member servers should be also. This can be done by adding the following line to your log in script substituting the "SERVER_NAME" for the name of the server you want to sync time with:

NET TIME \\SERVER_NAME /set /yes

The reason you would want all the workstations and member servers in 'time sync' is to prevent file locks based upon file mod/access times.

This discussion is closed to new replies.