SBS 2003 Users: You do not have the proper privilege level to change the system time

Hi,
We have an SBS server with 5 users. 2 are admins and 3 are normal domain users.

Of the normal 3 domain users, 2 of them can not open the clock to quickly look at the mini-calendar however for some reason (member of the same groups and a fresh XP install) the  other can.

How can I fix it so that the other 2 can see the clock too?
Even when I added the Power User Template to one of them and did a GPupdate on the machine it did not work.

Many thanks,
Jack

LVL 4
JackIT ManagerAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

davealfordIt SupportCommented:
You need to check what permissions the user has on the PC - by default, SBS DOmain Admins are administrators of PCs.
JackIT ManagerAuthor Commented:
They are all members of the same i.e

Domain Users
RWW Users

How would I go about checking what permissions the users have on the PCs?

Thanks.
davealfordIt SupportCommented:
At the PC,
Right click "Computer" select "Manage"
Select "Local users and groups"
Double click "Administrators" group

or

Run MMC on server, add/remove "Computer Manager"
Connect to required PC and then Select "Local Users and Groups" etc

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
10 Tips to Protect Your Business from Ransomware

Did you know that ransomware is the most widespread, destructive malware in the world today? It accounts for 39% of all security breaches, with ransomware gangsters projected to make $11.5B in profits from online extortion by 2019.

JackIT ManagerAuthor Commented:
In there is
Administrator
Domainname\Domain Admins

Also, from an article, I went to Local Security Settings | Local Policies | User Rights Assignment and opened "Change the system time"

I added the user name of the person who uses that PC Domainname\Anna and clicked OK.

Still can't open it.

JackIT ManagerAuthor Commented:
I had to re-log in and it started working.

I am curious though, could I not set this as a GPO from the SBS?
davealfordIt SupportCommented:
Only local administrators can change the system time so, adding them into the local PCs Administrators is one way BUT, it does mean they can do pretty much what they like on the PC.
I'm not actually sure that's the problem as, the calendar should popup for everyone (not just PC admins) ....
JackIT ManagerAuthor Commented:
Confirmed as working after adding the user in "Change the system time" in User Rights Assignment.

The mini calendar will pop up on Windows 7 (maybe Vista too) but not on XP.
davealfordIt SupportCommented:
The date and time is actually sync'd with the domain controller when the PC boots up. However, if the clock is amended by more than a few minutes out of sync with the server then you'll start getting login issues as Kerberos (used to authenticate users) relies on current time. If the time difference is greater than a pre-detrimined period then, the time sync will fail so, not ideal to give users access to changeing PC times.....
JackIT ManagerAuthor Commented:
I understand that as have seen problems of that nature in the past.

Still, I am curious as to whether this setting (allow "Change the system time" in User Rights Assignment.) can be applied by a GPO on the SBS?

Thanks,
Jack
JackIT ManagerAuthor Commented:
Can anyone comment as to whether this setting (allow "Change the system time" in User Rights Assignment.) can be applied by a GPO on the SBS?
Thanks,
Jack
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
SBS

From novice to tech pro — start learning today.