locked
change system time and NET TIME RRS feed

  • Question

  • Hi All,

    we are trying to stop users from changing the system time/clock, so we removed Administrators and Power Users group from "change the system time" policy, But at the same time we have a script to sync the clock with server using NET TIME, and of course it requires administrator priviledge so the script failed. Unfortunately users need the local administrator to perform their tasks.

     

    Is there any better way to achieve this task? thanks in advance

     

    Regards

     

    Wednesday, June 29, 2011 2:07 PM

All replies

  • Instead of using NET TIME, use Group Policy to tell the clients to get the time from the server.

    Run gpedit, and navigate to 'Computer Configuration/Administrative Templates/System/Windows Time Service'.

    Configure the two NTP client settings to enabled, and to point to your server.


    Note: You may have to configure your server to be an NTP server.

    Wednesday, June 29, 2011 3:17 PM
  • Thanks for that. I should have mentioned those PCs are not in a domain, they are in a WORKGROUP, that is an issue.

    Cheers

    Wednesday, June 29, 2011 10:17 PM
  • No, NTP relies on DNS to operate, so sorry, it won't work for you.
    Wednesday, June 29, 2011 10:42 PM
  • so what is another option? please

    Cheers

    Wednesday, June 29, 2011 10:50 PM
  • I don't see a way around it.  You have removed the right for administrators to change the time, and the script is running under adminstrator credentials, so it will fail.

    If the computers are connected to the internet, why not use internet time?

    • Proposed as answer by SenneVL Thursday, June 30, 2011 12:27 PM
    Wednesday, June 29, 2011 11:04 PM