Tick tock, syncronising clocks! 1

[Jiff]

Trying to syncronise all clocks on the domain to the PDC. It's an all win2k domain, with a single win2k server.
So in the logon script I've tried net time \\pdc /set /y. Works great on my machine, but then again, I've got Admin rights! Anyone without admin rights (everyone else!) and it don't work.
Ideas?

 

[ehartle]

Try looking around in your default domain group policy for the right to change system time.

 

[Jiff]

Unfortunately I don't want users to have the rites to change the time.

 

[french01]

If you have a pure Win2K network, have all the Workstations "Join the domain" and your work is already done for you.

Quoting from MSKB article PSS ID Number: Q266080

This article answers frequently asked questions about the Microsoft Windows 2000
implementation of the Kerberos V5 authentication protocol.


"The act of joining a
domain enables the Windows 2000 Time service so that it automatically starts at
boot. When communicating with Windows 2000 computers, time packets are secured
with a signed hash of the time information. Security is based on the Windows NT
secure channel and signature key is determined by the machine account of the
client."

-Hugh

 

[BabylonDrifter]

Doesen't seem to be working for me ????

when you say pure y2k network are you refering to servers as well?

I have one Y2k server w/ AD and 2 NT BDC's any way to point to the Y2k to force the time change?

Thanks