Active Directory Permissions?

[bobbyr]

I am currently running a Windows 2000 Server w/ Active Directory and Windows 2000 Pro Workstations. For some reason, when I try do do certain things on the Workstations (such as change the system time) it says that I don't have sufficient rights. If I logon as the domain admin, I can do anything. Does active directory have Security policies that it distributes to users when they logon to the network? This is a new server and new workstation that hasn't been modified from original. Any help would be appreciated.

Thanks,
Bobby R

 

[TimothyCox]

The directory schema is wicked complicated.
I don't mean to sound insulting, but If you are the primary support person in a 2000 structure, You need to take a course or two.

Respectfully,
Timothy Cox
When in doubt...........FDISK!

 

[AndyMac]

There are default group policies that get applied once a directory is set up and with time being critical to the schema's replication this is one of the settings restricted. You need to have a look at the group policy for the domain (use MMC with the Group Policy snap in). Look under the user rights section, under security, and you will see all of the rights, such as log on as a service, change time etc, and the groups that have permission to carry them out. Note though that there are also seperate group policies for Domain Controllers with restrictions such as log on locally. (This one got me)
Cheers,
Andy