Even Administrator can't change system time.

[jjjax]

Whatever signon that we use to sign on to our domain controller running Windows 2000 server sp4, we get the message "You don't have the proper privilege level to change the system time" when trying to change the time. We get a similar message when trying to to update it using the net time command to try to load it from another server. What's even weirder is that when we change it on the other servers on our network, it stays good for about 10 minutes then automatically changes it back to match the domain controller. It seems to have slowly gotten to the point where is is off about 6 minutes from the actual time. We checked policy settings and administrator and other groups that should be able to do it look good and can do it on all other servers except the the main domain controller. We can do it on another domain controller so I assume it's something with just that computer? Has anyone seen this or have any ideas? Thanks, Joe

 

[itaviator]

Check out the NET TIME command on MS site. Your DC (usually the first one that was set up) is configured as the time server. All other servers and clients in your network then sync with that DC for time settings. You'll have to run the NET TIME command on the main DC to sync with an actual time server out on the internet. I believe MS runs one and so does the Navy. There are probably others, you'll just have to find out what there ip addresses are. And I believe that you can only sync with one of them. Once your DC syncs with the time server, it will periodically poll it to keep up.

 

[itaviator]

Sorry, should read more closely - didn't realize you already checked the NET TIME command.

 

[blakey2]

Hi,

Might sound pretty stupid (on my behalf) but have you tried changing the internal BIOS clock time? - ie reboot, "press 'del' to enter setup or diagnostics'....." etc.

This should set the clock for the local machine - at least until it updates to reflect time on (time server)/ controller (or whatever they are referred to).

Cheers.

 

[paspas]

Hi jjjax,

I had the same problem...

This is the way that I have done it: go to My Computer, Control Panel, Administrative Tools and click on Local Security Settings when Local Security Settings windows appears expand Local Policies and click on User Rights Assignment and you will see in right pane of windows a rule CHANGE THE SYSTEM TIME, right click on it and then click in Security a new window will appear Local Security Policy Setting and this is the window that you can "play" with machine time, you have the ADD button click on it and add the users that have rights to change the system time for example Administrators, Users or Guest...
The new rule will be active when you reboot the machine !

Hope this helps...
Regards

 

[jjjax]

THANKS!!! That did it, I've been going crazy with this and was just waiting for a good time to call Microsoft to see if they could help. After making changes, I just had to logoff and back on without restarting and that did the trick. Thanks again, Joe