Answered by:
Allowing non-admin user to change time on server

-
I'm having trouble allowing a user account to change the time on my Server 2012 domain controller. Using the default domain controller group policy I have allowed this non-admin account local login rights, as well as rights to "Change the system time" in User Rights, but when I login using this account, I keep getting the "Unable to Continue. This program is blocked by group policy" message when I try to change the time. I can enable and disable the ability to Change Time Zone, but not the Date and Time. Does anyone have any ideas?
By the way, I know this setup isn't a good idea, but I need it for a student project.
Question
Answers
-
I got it working, thanks. It was my UAC settings.
- Marked as answer by Elaine JingModerator Wednesday, June 03, 2015 6:49 AM
All replies
-
> I can enable and disable the ability to Change Time Zone, but not the> Date and Time. Does anyone have any ideas?Run secpol.msc - is this account listed there or is your settingoverwritten? And what happens if you try to change the time not throughthe UI, but via commandline "time" command?In the UI, it might be an UAC issue if the applet has a"requireAdministrator" manifest.
Greetings/Grüße, Martin
Mal ein gutes Buch über GPOs lesen?
Good or bad GPOs? - my blog…
And if IT bothers me - coke bottle design refreshment (-: -
I don't really understand what you mean about secpol.msc. When I run it, the settings shown are the ones I set using group policy.
When I try to change the time from the command line using the account in question, I get the message "A required privilege is not held by the client".
I have UAC disabled.
-
> I don't really understand what you mean about secpol.msc. When I run it,> the settings shown are the ones I set using group policy.Just to make sure your privilege setting isn't overwritten :)> When I try to change the time from the command line using the account in> question, I get the message "A required privilege is not held by the> client"."whoami /privs"
Greetings/Grüße, Martin
Mal ein gutes Buch über GPOs lesen?
Good or bad GPOs? - my blog…
And if IT bothers me - coke bottle design refreshment (-: -
I got it working, thanks. It was my UAC settings.
- Marked as answer by Elaine JingModerator Wednesday, June 03, 2015 6:49 AM