Sign in
 

none
Allowing non-admin user to change time on server

 > 

    Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    I'm having trouble allowing a user account to change the time on my Server 2012 domain controller. Using the default domain controller group policy I have allowed this non-admin account local login rights, as well as rights to "Change the system time" in User Rights, but when I login using this account, I keep getting the "Unable to Continue. This program is blocked by group policy" message when I try to change the time. I can enable and disable the ability to Change Time Zone, but not the Date and Time. Does anyone have any ideas?

    By the way, I know this setup isn't a good idea, but I need it for a student project.

    Tuesday, May 26, 2015 12:31 PM
    |

Answers

All replies

  • Question
    Sign in to vote
    1
    Sign in to vote
    > I can enable and disable the ability to Change Time Zone, but not the
    > Date and Time. Does anyone have any ideas?
     
    Run secpol.msc - is this account listed there or is your setting
    overwritten? And what happens if you try to change the time not through
    the UI, but via commandline "time" command?
     
    In the UI, it might be an UAC issue if the applet has a
    "requireAdministrator" manifest.
     
    Greetings/Grüße, Martin

    Mal ein gutes Buch über GPOs lesen?
    Good or bad GPOs? - my blog…
    And if IT bothers me - coke bottle design refreshment (-:
    Tuesday, May 26, 2015 2:32 PM
    |
  • Question
    Sign in to vote
    0
    Sign in to vote

    I don't really understand what you mean about secpol.msc. When I run it, the settings shown are the ones I set using group policy.

    When I try to change the time from the command line using the account in question, I get the message "A required privilege is not held by the client".

    I have UAC disabled.

    Wednesday, May 27, 2015 4:49 PM
    |
  • Question
    Sign in to vote
    1
    Sign in to vote
    > I don't really understand what you mean about secpol.msc. When I run it,
    > the settings shown are the ones I set using group policy.
     
    Just to make sure your privilege setting isn't overwritten :)
     
    > When I try to change the time from the command line using the account in
    > question, I get the message "A required privilege is not held by the
    > client".
     
    "whoami /privs"
     
    Greetings/Grüße, Martin

    Mal ein gutes Buch über GPOs lesen?
    Good or bad GPOs? - my blog…
    And if IT bothers me - coke bottle design refreshment (-:
    Thursday, May 28, 2015 8:04 AM
    |
  • Question
    Sign in to vote
    0
    Sign in to vote
    I got it working, thanks. It was my UAC settings.
    Thursday, May 28, 2015 8:50 AM
    |