Solved

Registry Key  to allow user to change system time.

Posted on 1998-11-15
9
4,078 Views
Last Modified: 2013-12-23
Hi,

Does anyone know if there is a key/value that can change to give users the right to change the system time. I would like to put it in a policy rather than using SU.exe in the logon script (or manually change the user rights on all workstations).
I do understand timeserv.exe exists in the resource kit, is it any good i.e stable and installs over numerous workstations easily?
0
Comment
Question by:tombo
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
  • 2
  • +1
9 Comments
 

Author Comment

by:tombo
ID: 1565803
Edited text of question
0
 

Expert Comment

by:dsrikump
ID: 1565804
Tombo,
You can use User Manager for Domains(Start|Programs|Administrative Tools|User Manager) to allow users to change the system time.

Once the User Manager windiw is open, go to the Policies Menu, select "User Rights..."

User Rights Policy box should pop up.

This is an advanced user right so, you have to click the "Show Advanced User Rights" checkbox. Then select the Right "Change System Time." Then add the users or groups that you want to have this priviledge.

Also, if I were you, I'd make an additional group called time changers and simply add the users to that group, then only assign this group that right.

Good luck.

D
0
 
LVL 96

Expert Comment

by:Lee W, MVP
ID: 1565805
dsrikump has the answer.
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 7

Expert Comment

by:BlackMan
ID: 1565806
We are running timeserv on 50+ servers with no problem. Using various Resource Kit utilities you can even make a BAt file to install it remotely.. Otherwise, dsrikump is right...
0
 

Expert Comment

by:dsrikump
ID: 1565807
Tombo,

Since there is a majority that says I'm right, I'll resubmit.

You can use User Manager for Domains(Start|Programs|Administrative Tools|User Manager) to
allow users to change the system time.

Once the User Manager windiw is open, go to the Policies Menu, select "User Rights..."

User Rights Policy box should pop up.

This is an advanced user right so, you have to click the "Show Advanced User Rights" checkbox.
Then select the Right "Change System Time." Then add the users or groups that you want to have
this priviledge.

Also, if I were you, I'd make an additional group called time changers and simply add the users to
that group, then only assign this group that right.

Good luck.

D

PS: Thanks for the votes of confidence guys, kinda feeling a sense of community.
0
 

Author Comment

by:tombo
ID: 1565808
Sorry,

But I did say I knew how to set this with User Rights. What I wanted to know was if there was a registry key (I can't find one)that was modifiable for this so I could put it in a System policy, or whether the Timeserv.exe service was a stable MS option to use (Blackman seemed to answer this bit - wouldn't mind a copy of his .bat file!!!).
Using SU.exe with a hidden file for the username/password parameter is a last resort option.

cheers
0
 

Expert Comment

by:dsrikump
ID: 1565809
doh...go BlackMan!
0
 
LVL 7

Accepted Solution

by:
BlackMan earned 100 total points
ID: 1565810
Before deploying it, you need to do is to edit TIMESERV.INI so it works like you want it to...
Right here, I only have the BAT file that copies the files from our mainserver and install in on a server, but if you look at the Resource Kit, there is a utility to handle services on remote machines.. If you can find it, leave me a note and I'll dig it up when I'm home on monday..

Here's the BAT file:

copy \\AdmServer\setup\NTServer\TimeServ\Timeserv.exe c:\winnt\system32
copy \\AdmServer\setup\NTServer\TimeServ\Timeserv.dll c:\winnt\system32
copy \\AdmServer\setup\NTServer\TimeServ\Timeserv.ini c:\winnt
c:
cd\
cd winnt\system32
timeserv -automatic
net start timeserv
0
 
LVL 96

Expert Comment

by:Lee W, MVP
ID: 1565811
tombo,

Since this is a security related issue, the setting is probably stored in the SAM database.  And for good reason, I know of no way to edit this with registry settings.  I'd suggest either adjusting the policies or considering BlackMan's answer.
0

Featured Post

What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
FTP output from Wireshak 6 115
Maintain demoted SBS2011 as stand alone server 5 51
Force a website to use the second network card 3 70
Reasons for disabling SMB signing? 5 46
Sometimes you might need to configure routing based not only on destination IP address, but also on a combination of destination IP address (or hostname) and destination port number. I will describe a method how to accomplish this with free tools. …
An article on effective troubleshooting
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…

739 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question