I want to give users the right to change the time....

[Kelvin Beaton]

I want to give all the users on my network the right to change the clock on
their PC, throught group policies.

Is someone willing to share the steps to make this happen? Or where can I
find a resource that would walk me throught this secnario.

My server is running Win 2000 and this would be relevent to my Win XP
machines.

I feel like a need a GP for Dumbies to get me going on how to use GPs.

Thanks for any input!

Kelvin

 

[Steve Riley [MSFT]]

You most definitely do *not* want ordinary users to be able to change their
clocks. The computers will sync their clocks from the domain controller.
Keeping clocks in sync is required for Kerberos to work properly. This is
why ordinary users do not have the permission to change clocks.

 

[Mandy Shaw]

Why do they need to be able to change their clocks? (For example, if this is
a time zone or daylight saving type issue, maybe there is another, better,
solution someone can come up with.)
Mandy

 

[Kelvin Beaton]

thanks for the reply! I have a Netware login script that run and tries to
upadte the time on the workstation. I will look at removing that function
from the Netware server. The script is set to stop at the end if there is an
error, so it stops on my Win XP machines.

Thanks again.

Kelvin

 

[Kelvin Beaton]

Thanks for the reply! I have a Netware login script that run and tries to
upadte the time on the workstation. I will look at removing that function
from the Netware server. The script is set to stop at the end if there is an
error, so it stops on my Win XP machines.
I'm just realizing that the time is Syncronizing it's self. So I would
assume that the XP workstations are synchronizing with the Domain
controller. Then how do I know or configure the Domain server to keep it's
time correct? Can I configure the interval of time either of the server or
workwstations use to synch thier time? Like I want the server to check every
three hours and the workstations every six hours?

Thanks again.

Kelvin

 

[Kelvin Beaton]

I like the idea that my XP machines would synch with my server....but I just
checked and my domain controller and my workstation are about 7 minutes
different in time.
So if this is all suppose to be synching, how do I confirm that it is and
how do I trouple shoot if it's not?

Thanks

Kelvin

 

[Steve Riley [MSFT]]

Computers that join the domain will sync their clocks from the DC. On the DC
you need to point the SNTP time service to a reliable time source. Search
the KB on "time sync," you'll find an article describing how to do that.