ipcipher
asked on
Getting "Access denied. System error 5 has accourred." When trying to update time on client pc using the command net time \\servername /set /q
Getting "Access denied. System error 5 has accourred." When trying to update time on client pc using the command net time \\servername /set /q
Adam Leinss
What are the privileges of said user? I think you need to be at the Power User level or greater to set system time.
Usually the w32time service should do this for you and shouldn't need to use the old net time function, but if you really need it, the user needs these privs:
Load gpedit.msc or a GPO for the computers in the domain:
Computer Configuration\Windows Settings\Security Settings\Local Policies\User rights Assignment
Grant Authenticated users the following right: Change the system time
This way you don't have to grant users Power users rights that gives the users too much control of the desktop.
Load gpedit.msc or a GPO for the computers in the domain:
Computer Configuration\Windows Settings\Security Settings\Local Policies\User rights Assignment
Grant Authenticated users the following right: Change the system time
This way you don't have to grant users Power users rights that gives the users too much control of the desktop.
Forgot to add to do a gpupdate /force or reboot the machine and the user should be good to go.
Also if you do a:
Net Time /setsntp
... that will force your clients to use domain hierarchy and if the w32time service is running it will sync time with its servicing domain controller in the background. This way you don't have to use the legacy net time /set....
Also if you do a:
Net Time /setsntp
... that will force your clients to use domain hierarchy and if the w32time service is running it will sync time with its servicing domain controller in the background. This way you don't have to use the legacy net time /set....
ASKER
The users have full control to their machines. Domain user are in the administrator group on the local machine. I ran the net time /setsntp command and it was successful. The time however has not updated on the local machine. I have also entered the net time command and it shows me that the domain controller has the correct time but the local machine does not.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Just curious, what configured users do you have when you run gpedit.msc in the following lcoation:
Computer Configuration\Windows Settings\Security Settings\Local Policies\User rights Assignment\Change the system time?
Administrators and Power Users are the defaults.
Computer Configuration\Windows Settings\Security Settings\Local Policies\User rights Assignment\Change the system time?
Administrators and Power Users are the defaults.
ASKER
When i look at the domain GPO the change system time is set to allow all domain users. when i look at the local machine gpedit.msc is also set to allow all domain users. I ran the command w32tm /resync /rediscover /nowait and the clock is still one hour off. any ideas?
One hour off eh? Seems like a time zone or daylight savings time issue. Check your time zone or daylight savings settings.
ASKER
Thanks!
Glad to help.