Avatar of PAGANED
PAGANED
Flag for United States of America asked on

GPO --> NTP : Windows Time Server + GPO --> Change SystemTime

I have a bit of a problem...
Both GPOs do not work together
.
I am running a GPO BAT script  (USER Applied)
 SERVERNAME = our SERVER NAME
.......
NET TIME \\SERVERNAME /SET /YES
......

This works perfectly fine
.
.
Now I am trying to keep USERS (our users are local administrators to their computers)
from being able to edit the Windows Time Clock :  Windows 7 Ult x32
This GPO is a (COMPUTER) applied
Computer >> Policies >> Windows Settings >> Security Settings >> Local Policies >> User Rights Assignment >> Change the System Time    (set to Domain Admins)

This GPO works just fine as well , however this one seems to Trump the User login due to the fact that it is a Computer GPO policy
Regardless of Group Policy Inheritance with the NetTime being above the Windows Clock Edit
.
.
So maybe I shouldn't be using NET TIME  bat script anyway ... so I went into a new GPO
Computer >> Policies >> Administrative Templates >> System >> Windows Time Service >> Time Providers

I'm thinking I could just point to a specific NTP server , although I would prefer to point to my Network Server
Here's what I did >>  (defaults except for NTP server)
NtpServer :   nist1-la.ustiming.org,0x09
Type :   NT5DS
CrossSiteSyncFlags :   2
ResolvePeerBackoffMinutes :   15
ResolvePeerBackoffMaxTimes :   7
SpecialPollInterval :   3600
EventLogFlags :   0

.
.
This was applied , but time did not change.
I had the computer set 10 minutes ahead of actual time
.
.


What am I doing wrong?
Microsoft Legacy OSMicrosoft Server OSWindows Server 2008

Avatar of undefined
Last Comment
KevinSchmaltz

8/22/2022 - Mon
SOLUTION
Brian Pierce

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
PAGANED

ASKER
DAMN IT ....  I WAS BLIND
.
They both don't work together
COMPUTER >> Change the System Time    trumps the USER >> Net Time script
.
.
I see that I DON'T need to run the Net Time script at all
.
.
On a side note :
Why didn't the NTP Time Providers GPO work ?
The GPO was applied (gpresult /r)
Time however, did not change as it was set 10 minutes ahead
.
ASKER CERTIFIED SOLUTION
KevinSchmaltz

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
Experts Exchange has (a) saved my job multiple times, (b) saved me hours, days, and even weeks of work, and often (c) makes me look like a superhero! This place is MAGIC!
Walt Forbes