Solved

Registry Key  to allow user to change system time.

Posted on 1998-11-15
9
4,022 Views
Last Modified: 2013-12-23
Hi,

Does anyone know if there is a key/value that can change to give users the right to change the system time. I would like to put it in a policy rather than using SU.exe in the logon script (or manually change the user rights on all workstations).
I do understand timeserv.exe exists in the resource kit, is it any good i.e stable and installs over numerous workstations easily?
0
Comment
Question by:tombo
  • 3
  • 2
  • 2
  • +1
9 Comments
 

Author Comment

by:tombo
ID: 1565803
Edited text of question
0
 

Expert Comment

by:dsrikump
ID: 1565804
Tombo,
You can use User Manager for Domains(Start|Programs|Administrative Tools|User Manager) to allow users to change the system time.

Once the User Manager windiw is open, go to the Policies Menu, select "User Rights..."

User Rights Policy box should pop up.

This is an advanced user right so, you have to click the "Show Advanced User Rights" checkbox. Then select the Right "Change System Time." Then add the users or groups that you want to have this priviledge.

Also, if I were you, I'd make an additional group called time changers and simply add the users to that group, then only assign this group that right.

Good luck.

D
0
 
LVL 95

Expert Comment

by:Lee W, MVP
ID: 1565805
dsrikump has the answer.
0
 
LVL 7

Expert Comment

by:BlackMan
ID: 1565806
We are running timeserv on 50+ servers with no problem. Using various Resource Kit utilities you can even make a BAt file to install it remotely.. Otherwise, dsrikump is right...
0
Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

 

Expert Comment

by:dsrikump
ID: 1565807
Tombo,

Since there is a majority that says I'm right, I'll resubmit.

You can use User Manager for Domains(Start|Programs|Administrative Tools|User Manager) to
allow users to change the system time.

Once the User Manager windiw is open, go to the Policies Menu, select "User Rights..."

User Rights Policy box should pop up.

This is an advanced user right so, you have to click the "Show Advanced User Rights" checkbox.
Then select the Right "Change System Time." Then add the users or groups that you want to have
this priviledge.

Also, if I were you, I'd make an additional group called time changers and simply add the users to
that group, then only assign this group that right.

Good luck.

D

PS: Thanks for the votes of confidence guys, kinda feeling a sense of community.
0
 

Author Comment

by:tombo
ID: 1565808
Sorry,

But I did say I knew how to set this with User Rights. What I wanted to know was if there was a registry key (I can't find one)that was modifiable for this so I could put it in a System policy, or whether the Timeserv.exe service was a stable MS option to use (Blackman seemed to answer this bit - wouldn't mind a copy of his .bat file!!!).
Using SU.exe with a hidden file for the username/password parameter is a last resort option.

cheers
0
 

Expert Comment

by:dsrikump
ID: 1565809
doh...go BlackMan!
0
 
LVL 7

Accepted Solution

by:
BlackMan earned 100 total points
ID: 1565810
Before deploying it, you need to do is to edit TIMESERV.INI so it works like you want it to...
Right here, I only have the BAT file that copies the files from our mainserver and install in on a server, but if you look at the Resource Kit, there is a utility to handle services on remote machines.. If you can find it, leave me a note and I'll dig it up when I'm home on monday..

Here's the BAT file:

copy \\AdmServer\setup\NTServer\TimeServ\Timeserv.exe c:\winnt\system32
copy \\AdmServer\setup\NTServer\TimeServ\Timeserv.dll c:\winnt\system32
copy \\AdmServer\setup\NTServer\TimeServ\Timeserv.ini c:\winnt
c:
cd\
cd winnt\system32
timeserv -automatic
net start timeserv
0
 
LVL 95

Expert Comment

by:Lee W, MVP
ID: 1565811
tombo,

Since this is a security related issue, the setting is probably stored in the SAM database.  And for good reason, I know of no way to edit this with registry settings.  I'd suggest either adjusting the policies or considering BlackMan's answer.
0

Featured Post

Free camera licenses with purchase of My Cloud NAS

Milestone Arcus software is compatible with thousands of industry-leading cameras for added flexibility. Upon installation on your My Cloud NAS, you will receive two (2) camera licenses already enabled in the software. And for a limited time, get additional camera licenses FREE.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A brief overview to explain gateways, default gateways and static routes OR NO - you CANNOT have two default gateways on the same server, PC or other Windows-based network device. In simple terms a gateway is formed when a computer such as a serv…
Trying to figure out group policy inheritance and which settings apply where can be a chore.  Here's a very simple summary I've written which might help.  Keep in mind, this is just a high-level conceptual overview where I try to avoid getting bogge…
Along with being a a promotional video for my three-day Annielytics Dashboard Seminor, this Micro Tutorial is an intro to Google Analytics API data.
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…

867 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now