can't get login script to set workstation time properly

From: Gerry Voras (Gerry.Voras_at_NEXTACTION.COM)
Date: 08/01/03 

Date: Fri, 1 Aug 2003 09:47:24 -0600

I'm working on a Win2K, Active Directory network. I've made a copy of an old
NT Server login script which has the following command:

     net time /set /yes

This command works just fine in the 98 and NT workstation environments;
however, when I try to use it in the Win2K environment, with a Win2KPro
workstation, I get the error:

     Error 1314, Cannot Set System Clock

I get this error when attempting to log in as a user from the User or
Everyone local groups. This error does not appear when I log in from an
Administrator or Power User

I have attempted to modify the Default Domain Policy on the server at start
| programs | admin tools | Domain Security Policies| Local Policies | User
Rights Assignment | Change System Time to include more groups; the
workstation effective policies do not show the change.

I have also attempted to set the workstation local security policy at start
| programs | admin tools | LSP | User Rights Assignment | Change System Time
to include Everyone and Users; however the effective policy does not show
these groups, and I do not wich to modify the LSP on 100 workstations.

I think there is a set of settings in the AD Domain or Group Policy that I
need to alter, but which ones?

In what I believe is a related detail, workstation users that are not
Administrators or Power Users cannot open the systray clock/calander.

Relevant Pages

  • Re: GPO wont apply
    ... try using the gpupdate command from a command prompt on ... the workstation that you want the policy applied to. ... under security filtering it applies to test user only. ...
    (microsoft.public.windows.group_policy)
  • Re: Remove Shut Down doesnt work
    ... Group Policy tools typically focus on the PDC Emulator when a change is made ... Is there a DC local to the workstation the user is logging onto or are the ... When this user logs in, ... The Shut Down command still shows up in the start menu as usual. ...
    (microsoft.public.windows.group_policy)
  • Re: what gpo setting is this?
    ... English blog: http://lordoftheping.blogspot.com ... In the same place check for "Interactive Logon: ... For that policy you need to create a conflict policy that reverses ... Simple (Assuming that you moved that workstation ...
    (microsoft.public.windows.server.active_directory)
  • Re: Question Multi A/V Tool
    ... You have to execute NET START WORKSTATION in a Command Prompt. ... and in the Command Prompt window enter; ...
    (microsoft.public.security.virus)
  • RE: group policy errors
    ... Thank you for posting to the SBS Newsgroup. ... I understand that you found error in Resultant Set of Policy on one client ... Does this issue happen on one domain client workstation or all of them? ...
    (microsoft.public.windows.server.sbs)