Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Group Policy - Remove Clock - Put it back

Posted on 2004-08-26
15
Medium Priority
?
785 Views
Last Modified: 2008-01-09
Yesterday, I put on a policy on a few OU's that gets rid of the clock. I need to put it back. I removed the policy that I set up yesterday - but people still do not have their clocks. I tried rebooting - gpupdate. I had already replicated all of our servers. It has been a few hours. How can I give them their clocks back.


I also put on a new policy in the mean time that resricts access to the clock - they can see it, but not make any changes. This is a machine policy - Windows - Security - local policy - Restricted Change system time to only administrators. But this should have no affect on the above. The users need to see their clocks. They are about to riot.
0
Comment
Question by:mspolter
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 7
  • 3
  • 2
  • +1
15 Comments
 
LVL 4

Expert Comment

by:shard26
ID: 11906349
Do they still not have thier clocks?
Do you have more than 1 DC?
Have the users rebooted thier computers?

0
 

Author Comment

by:mspolter
ID: 11906391
They have rebooted - many times. We have a few 2000 DC's and 1 2003 DC. They still do not have their clocks. It is very strange because some of them have it (I don't think they restarted) and most do not.
0
 
LVL 25

Expert Comment

by:mikeleebrla
ID: 11906531
on your xp clients run gpupdate from command line to get the latest copy of their GPO information
0
Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

 

Author Comment

by:mspolter
ID: 11906631
I did. I have checked the registry and it looks like the hide clock restriction is gone - yet the clock does not appear. Why is it not appearing?
0
 

Author Comment

by:mspolter
ID: 11906648
When I log in as myself (domain admin) - the clock appears.
0
 
LVL 25

Expert Comment

by:mikeleebrla
ID: 11906917
log in as a user,, run gpresult,,,, is the GPO where the clock allow/deny being appliied?
0
 

Author Comment

by:mspolter
ID: 11907193
I did - No, it is not being applied. Say there are 2 users. User A and user B. user A logged into comuter A this morning. User B logged in computer B this morning. They are both part of the same OU with the same permissions. They both do not have the system clock. Now - after we removed the policy - When they log on to their own computers - they still do not have the system clock. But when they log into each others computers - they have access to the system clock. It seems as though there is some configuration stuck in their registry. But I have searched the registry exhaustively and have been unable to come up with anything.
0
 
LVL 25

Expert Comment

by:mikeleebrla
ID: 11907241
i understand that the clock isn't there on some but is on others,, but by looking at the result of GPUPDATE are the GPOs being applied consistant between the computers??  dont look at the clock to find this out,, look at the result  of GPUPDATE
0
 

Author Comment

by:mspolter
ID: 11907429
I have looked in the results and the GPO's are being applied consistently. No Policy for the clock is being applied to any computer. You mean the gpresult. I am using the resultant set of policu MMC snap in.
0
 
LVL 12

Expert Comment

by:ColinRoyds
ID: 11907659
The problem is that you do not have a policy to reverse what you did, you need a new policy to say "enable clock" to reset the registry to the correct setting, by just removing the policy wont help as the registry has already been set and you need something to counter it saying the exact opposite.
If you leave a new policy as unspecified on the clock it will leave the orginial disabled setting in the registry set, you need to have one saying enable to undo it.

then run secedit (win 2k) or gpupdate (win xp) to force the policy o apply quicker.

 
Hope it helps this should sort it out.
0
 

Author Comment

by:mspolter
ID: 11907864
There is no policy (that I know of that) does that. What is "the orginial disabled setting in the registry set" ? I have looked through the registry and for each policy that is there - there is a registry setting. There is no policy there for the clock so there should be no problem. My problem is that there seems to be nothing to undo in the registry. What you (ColinRoyds) are suggestion seems to not be true - unless you could tell me a specific registry setting.
0
 
LVL 12

Expert Comment

by:ColinRoyds
ID: 11907909
I do not the know the excat registry setting and to be honest I am not going to look (sorry not trying to be difficult), but the general principle remains the same, you need a policy to undo what the original one did.
0
 

Accepted Solution

by:
mspolter earned 0 total points
ID: 11913360
I figured out the answer. Thanks everyone for trying. You have to right click the taskbar  -  click on properties - Check the show clock option. Here I was studying the registry and the answer was so simple - but no one else was able to give it to me either - so I don't feel so bad.
0

Featured Post

Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

by Batuhan Cetin In this article I will be guiding through the process of removing a failed DC metadata from Active Directory (hereafter, AD) using the ntdsutil tool in a Windows Server 2003 environment. These steps are not necessary in a Win…
I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
Visualize your data even better in Access queries. Given a date and a value, this lesson shows how to compare that value with the previous value, calculate the difference, and display a circle if the value is the same, an up triangle if it increased…
In this video, Percona Solution Engineer Dimitri Vanoverbeke discusses why you want to use at least three nodes in a database cluster. To discuss how Percona Consulting can help with your design and architecture needs for your database and infras…

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question