• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1058
  • Last Modified:

SBS 2003 Users: You do not have the proper privilege level to change the system time

Hi,
We have an SBS server with 5 users. 2 are admins and 3 are normal domain users.

Of the normal 3 domain users, 2 of them can not open the clock to quickly look at the mini-calendar however for some reason (member of the same groups and a fresh XP install) the  other can.

How can I fix it so that the other 2 can see the clock too?
Even when I added the Power User Template to one of them and did a GPupdate on the machine it did not work.

Many thanks,
Jack

0
JackHodson
Asked:
JackHodson
  • 6
  • 4
1 Solution
 
davealfordIt SupportCommented:
You need to check what permissions the user has on the PC - by default, SBS DOmain Admins are administrators of PCs.
0
 
JackHodsonIT ManagerAuthor Commented:
They are all members of the same i.e

Domain Users
RWW Users

How would I go about checking what permissions the users have on the PCs?

Thanks.
0
 
davealfordIt SupportCommented:
At the PC,
Right click "Computer" select "Manage"
Select "Local users and groups"
Double click "Administrators" group

or

Run MMC on server, add/remove "Computer Manager"
Connect to required PC and then Select "Local Users and Groups" etc
0
Cloud Class® Course: CompTIA Healthcare IT Tech

This course will help prep you to earn the CompTIA Healthcare IT Technician certification showing that you have the knowledge and skills needed to succeed in installing, managing, and troubleshooting IT systems in medical and clinical settings.

 
JackHodsonIT ManagerAuthor Commented:
In there is
Administrator
Domainname\Domain Admins

Also, from an article, I went to Local Security Settings | Local Policies | User Rights Assignment and opened "Change the system time"

I added the user name of the person who uses that PC Domainname\Anna and clicked OK.

Still can't open it.

0
 
JackHodsonIT ManagerAuthor Commented:
I had to re-log in and it started working.

I am curious though, could I not set this as a GPO from the SBS?
0
 
davealfordIt SupportCommented:
Only local administrators can change the system time so, adding them into the local PCs Administrators is one way BUT, it does mean they can do pretty much what they like on the PC.
I'm not actually sure that's the problem as, the calendar should popup for everyone (not just PC admins) ....
0
 
JackHodsonIT ManagerAuthor Commented:
Confirmed as working after adding the user in "Change the system time" in User Rights Assignment.

The mini calendar will pop up on Windows 7 (maybe Vista too) but not on XP.
0
 
davealfordIt SupportCommented:
The date and time is actually sync'd with the domain controller when the PC boots up. However, if the clock is amended by more than a few minutes out of sync with the server then you'll start getting login issues as Kerberos (used to authenticate users) relies on current time. If the time difference is greater than a pre-detrimined period then, the time sync will fail so, not ideal to give users access to changeing PC times.....
0
 
JackHodsonIT ManagerAuthor Commented:
I understand that as have seen problems of that nature in the past.

Still, I am curious as to whether this setting (allow "Change the system time" in User Rights Assignment.) can be applied by a GPO on the SBS?

Thanks,
Jack
0
 
JackHodsonIT ManagerAuthor Commented:
Can anyone comment as to whether this setting (allow "Change the system time" in User Rights Assignment.) can be applied by a GPO on the SBS?
Thanks,
Jack
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Cloud Class® Course: CompTIA Cloud+

The CompTIA Cloud+ Basic training course will teach you about cloud concepts and models, data storage, networking, and network infrastructure.

  • 6
  • 4
Tackle projects and never again get stuck behind a technical roadblock.
Join Now