updating policies with a script

[linolil]

There is a corporate policy forbidding the use of group
policies -- please don't ask why, because I haven't a
clue.

When users login, the startup batch file attempts to
set the system time.

net time \\timeserver /set /yes

Unfortunately, this only works if someone, running as
an administrator, set the following administration
options.

Start->Control Panel->Administrative Tools->Local Security Policy
Local Policies->User Rights Administration
Change the system time (grant permission)

This setting doesn't seem to appear in the registry. (At
least I cannot find it using regedit.)

What I would like to do is write a little startup script
that would set this option. Sort of a time.reg file.....

Is that possible?

Linolil

 

[Jerold Schulman]

There is a corporate policy forbidding the use of group
policies -- please don't ask why, because I haven't a
clue.

When users login, the startup batch file attempts to
set the system time.

net time \\timeserver /set /yes

Unfortunately, this only works if someone, running as
an administrator, set the following administration
options.

Start->Control Panel->Administrative Tools->Local Security Policy
Local Policies->User Rights Administration
Change the system time (grant permission)

This setting doesn't seem to appear in the registry. (At
least I cannot find it using regedit.)

What I would like to do is write a little startup script
that would set this option. Sort of a time.reg file.....

Is that possible?

Linolil

See tip JSI Tip 6705. What are the free Windows Server 2003 Resource Kit tools?
in the 'Tips & Tricks' at http://www.jsifaq.com

ntrights +r SeSystemtimePrivilege -u Users


Jerold Schulman
Windows Server MVP
JSI, Inc.
http://www.jsiinc.com
http://www.jsifaq.com

 

[linolil]

Thanks for the pointer to your site. I will give that a try.
Linolil