Link to home
Start Free TrialLog in
Avatar of antonioking
antoniokingFlag for United Kingdom of Great Britain and Northern Ireland

asked on

Cannot change system time - Windows Server 2008 R2

My Server 2008 R2 server is our DC and timeserver.

It's 3 minutes slow, and I want to update the time but I'm getting

"unable to continue
You do not have permission to perform this task.
Please contact your administrator for help"

I am logged in as the domain administrator!

I've checked secpol.msc and only Server Operators and LOCAL SERVICE are listed users that can Change the System Time.
Avatar of antonioking
antonioking
Flag of United Kingdom of Great Britain and Northern Ireland image

ASKER

P.S: The option to Add User/Group is greyed out.
try it in local admin

domain admin should be used by anything on a domain
Avatar of Elmar Koschka
please login with local admin account and test. not the domain admin account.
If you go to the users computer, open user manager for the local machine. Open policies>user rights . There will be an option listed as change system time (add domain-admins). or deploy with gpo.
Since when have you ever been able to logon to a DC with a local administrator account!?!?!
Is this the only domain controller in the domain? it sounds like the local security policy on the DC computer did not get configured correctly during the promotion. What I would recommend is if possible, get another computer (a decent PC Box w/2GB RAM and 80GB HDD should be fine), install server OS on it, dcpromo it, verify that all the rights are set correctly, migrate the FISMO and GC to it, demote the original DC, check the security policy, you may need to remove/rejoin the domain, then reverse the process. If you have another DC, ignore the second box bit :-). I've had times when dcpromo did not run correctly, especially when upgrading from 2k3 to 2k8 domain.
This isn't the only DC. We have 2.
ASKER CERTIFIED SOLUTION
Avatar of Ilya Rubinshteyn
Ilya Rubinshteyn
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial