troubleshooting Question

GPO --> NTP : Windows Time Server + GPO --> Change SystemTime

Avatar of PAGANED
PAGANEDFlag for United States of America asked on
Microsoft Legacy OSMicrosoft Server OSWindows Server 2008
3 Comments2 Solutions1108 ViewsLast Modified:
I have a bit of a problem...
Both GPOs do not work together
.
I am running a GPO BAT script  (USER Applied)
 SERVERNAME = our SERVER NAME
.......
NET TIME \\SERVERNAME /SET /YES
......

This works perfectly fine
.
.
Now I am trying to keep USERS (our users are local administrators to their computers)
from being able to edit the Windows Time Clock :  Windows 7 Ult x32
This GPO is a (COMPUTER) applied
Computer >> Policies >> Windows Settings >> Security Settings >> Local Policies >> User Rights Assignment >> Change the System Time    (set to Domain Admins)

This GPO works just fine as well , however this one seems to Trump the User login due to the fact that it is a Computer GPO policy
Regardless of Group Policy Inheritance with the NetTime being above the Windows Clock Edit
.
.
So maybe I shouldn't be using NET TIME  bat script anyway ... so I went into a new GPO
Computer >> Policies >> Administrative Templates >> System >> Windows Time Service >> Time Providers

I'm thinking I could just point to a specific NTP server , although I would prefer to point to my Network Server
Here's what I did >>  (defaults except for NTP server)
NtpServer :   nist1-la.ustiming.org,0x09
Type :   NT5DS
CrossSiteSyncFlags :   2
ResolvePeerBackoffMinutes :   15
ResolvePeerBackoffMaxTimes :   7
SpecialPollInterval :   3600
EventLogFlags :   0

.
.
This was applied , but time did not change.
I had the computer set 10 minutes ahead of actual time
.
.


What am I doing wrong?
ASKER CERTIFIED SOLUTION
KevinSchmaltz

Our community of experts have been thoroughly vetted for their expertise and industry experience.

Join our community to see this answer!
Unlock 2 Answers and 3 Comments.
Start Free Trial
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 2 Answers and 3 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros