Sync Domain Time with users that have no time rights??

[cwhitesock]

We have our users locked down, and we need to keep them that way. The users should not be able to change their local computer time. BUT, we also need to have them sync their computer time with the domain. Is there a way to have this done without giving them access to change their local time?

I understand the command net time and also how it is used in logon scripts. Is there a solution that anybody knows of for this? Or will I have to purchase some kind of software to allow this to happen?

Thank you for any and all help!

 

[yizhar]

HI.

If you're willing to spend the time for this, you can try this solution:

* Install SUSS service from the NT Resource Kit on all NT workstations.
(Same for W2K pro workstations, but I'm not sure if SUSS will install and run under W2K . "RunAs" service that comes with W2K won't help in this case as it is not scriptable).

* Use NETRUN from here:

http://teachers.sivan.co.il/yizhar#NUTS

It can work with SUSS passing it admin credentials to run required task.
Before using, read the instructions of the program.


A simpler solution will be to search for other more advanced 3rd party tools that can do that and more.


Another option (that requires installation on clients), create a CMD file and run it from "Scheduled Tasks" to set the time.
But note that a malicious and skilled user can take advantage of this..

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar