Domain Users access to change system Time

NicCOConnor,

Thanks, sorry I should have pointed out that the client is Windows 2000 but the server is NT4.  Does that make a difference ?

I'm not so good with NT4, however I belive that by default all users in the domain can already change the time so really all you would need to do is Run the script as a logon script and the correct time will be set at logon.

Nic

Do the following on the NT4-server:

http://is-it-true.org/nt/atips/atips267.shtml

Many Regards
Jorgen Malmgren
IT-Supervisor
Denmark

quexdex,
like stated MSGeek yo can use
 NET TIME \\SERVERNAME /SET /YES
although the group Domain Users don't have enough
permissions to change the time, the system only permit
syn the time with your logonserver and you can use this
command in your logon script:

NET TIME \\%logonserver% /SET /YES

MG

MANUELGUERRA... "Domain Users don't have enough
permissions to change the time"

Did'nt you read my link?

http://is-it-true.org/nt/atips/atips267.shtml

It tells how Domain Users can change the time without being member of the local admin group

Many Regards
Jorgen Malmgren
IT-Supervisor
Denmark

trywaredk,
Yes, your answer permit the users "change the time", what I say is that for design NT permit "change the time" only to synchronize time with the logon server although the users don´t have permissions for change time. For security I should only permit SYNCHRONIZE.

The system permits only SYNCHRONIZE the time.

MG

Synchronize local clock for the workstation or even the server is very important subject and it should be handled with car, I will suggest the following solution:

On the server
a)     create a user with time with the name “SYNCHRONIZE”, and set a difficult password
b)     add this user to the “Account operators” or “Administers” group, these groups permitted to change the local time
c)     Create a batch file with following line “NET TIME \\YOURSERVER /SET /YES” and name it as timecync.cmd, and copy it to shared and restricted the folder, now we centralized the batch and we can later change the “YOURSERVER” to any other server

On the workstation

using Task Scheduler in Windows NT 4.0 and Internet Explorer 4.0 or Later
---------------------------------------------------------------------
a)     In the Winnt\Tasks folder in Windows NT Explorer, double-click Add Scheduled Task.
b)     Click Next.
c)     Click Browse.
d)     In the "Select Program to Schedule" dialog box, go to C:\.
e)     And enter \\YOURSERVER\YOURSHARED\timecync.cmd, and then click Open.
f)     Click "When my computer starts”", and then click Next.
g)     Click Next. You see the screen for the user account that the task will use.   Type the user name “” and password.
h)     Click Finish.