Cannot change system time - Windows Server 2008 R2

My Server 2008 R2 server is our DC and timeserver.

It's 3 minutes slow, and I want to update the time but I'm getting

"unable to continue
You do not have permission to perform this task.
Please contact your administrator for help"

I am logged in as the domain administrator!

I've checked secpol.msc and only Server Operators and LOCAL SERVICE are listed users that can Change the System Time.
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

antoniokingAuthor Commented:
P.S: The option to Add User/Group is greyed out.
try it in local admin

domain admin should be used by anything on a domain
Elmar KoschkaSenior System EngineerCommented:
please login with local admin account and test. not the domain admin account.
Acronis True Image 2019 just released!

Create a reliable backup. Make sure you always have dependable copies of your data so you can restore your entire system or individual files.

Elmar KoschkaSenior System EngineerCommented:
If you go to the users computer, open user manager for the local machine. Open policies>user rights . There will be an option listed as change system time (add domain-admins). or deploy with gpo.
antoniokingAuthor Commented:
Since when have you ever been able to logon to a DC with a local administrator account!?!?!
Ilya RubinshteynCommented:
Is this the only domain controller in the domain? it sounds like the local security policy on the DC computer did not get configured correctly during the promotion. What I would recommend is if possible, get another computer (a decent PC Box w/2GB RAM and 80GB HDD should be fine), install server OS on it, dcpromo it, verify that all the rights are set correctly, migrate the FISMO and GC to it, demote the original DC, check the security policy, you may need to remove/rejoin the domain, then reverse the process. If you have another DC, ignore the second box bit :-). I've had times when dcpromo did not run correctly, especially when upgrading from 2k3 to 2k8 domain.
antoniokingAuthor Commented:
This isn't the only DC. We have 2.
Ilya RubinshteynCommented:
the one that has the PDC role is having an issue. try the steps above my moving the FSMO, etc.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.