?
Solved

Cannot change system time - Windows Server 2008 R2

Posted on 2012-03-12
8
Medium Priority
?
1,859 Views
Last Modified: 2012-05-29
My Server 2008 R2 server is our DC and timeserver.

It's 3 minutes slow, and I want to update the time but I'm getting

"unable to continue
You do not have permission to perform this task.
Please contact your administrator for help"

I am logged in as the domain administrator!

I've checked secpol.msc and only Server Operators and LOCAL SERVICE are listed users that can Change the System Time.
0
Comment
Question by:antonioking
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
  • 2
  • +1
8 Comments
 

Author Comment

by:antonioking
ID: 37709187
P.S: The option to Add User/Group is greyed out.
0
 
LVL 30

Expert Comment

by:IanTh
ID: 37709205
try it in local admin

domain admin should be used by anything on a domain
0
 
LVL 8

Expert Comment

by:Elmar-H
ID: 37709210
please login with local admin account and test. not the domain admin account.
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
LVL 8

Expert Comment

by:Elmar-H
ID: 37709212
If you go to the users computer, open user manager for the local machine. Open policies>user rights . There will be an option listed as change system time (add domain-admins). or deploy with gpo.
0
 

Author Comment

by:antonioking
ID: 37709256
Since when have you ever been able to logon to a DC with a local administrator account!?!?!
0
 
LVL 7

Expert Comment

by:Ilya Rubinshteyn
ID: 37714670
Is this the only domain controller in the domain? it sounds like the local security policy on the DC computer did not get configured correctly during the promotion. What I would recommend is if possible, get another computer (a decent PC Box w/2GB RAM and 80GB HDD should be fine), install server OS on it, dcpromo it, verify that all the rights are set correctly, migrate the FISMO and GC to it, demote the original DC, check the security policy, you may need to remove/rejoin the domain, then reverse the process. If you have another DC, ignore the second box bit :-). I've had times when dcpromo did not run correctly, especially when upgrading from 2k3 to 2k8 domain.
0
 

Author Comment

by:antonioking
ID: 37915004
This isn't the only DC. We have 2.
0
 
LVL 7

Accepted Solution

by:
Ilya Rubinshteyn earned 2000 total points
ID: 37915065
the one that has the PDC role is having an issue. try the steps above my moving the FSMO, etc.
0

Featured Post

Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I was prompted to write this article after the recent World-Wide Ransomware outbreak. For years now, System Administrators around the world have used the excuse of "Waiting a Bit" before applying Security Patch Updates. This type of reasoning to me …
Resolving an irritating Remote Desktop connection that stops your saved credentials from being used.
This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Suggested Courses

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question