How do I configure a user so they can change the system time?

A. The ability to change the time on an NT system is a Right that has to be granted through the User Rights Policy in User Manager.

  1. Start User Manager (Start - Programs - Administrative Tools - User Manager)
  2. From the Policies menu select User Rights
  3. From the drop down menu select "Change the System Time)
  4. Click the Add button and add any users you wish to perform this
  5. Click OK to exit the dialog
  6. Close User Manager
  7. The user will need to log off and log on again

Also see Q. Can I synchronize the time of a NT Workstation with a NT Server?

You can also use a script which automates the granting of the right to all domain users:

Create the Addtime.bat and Addtime2.BAT files listed below.

Run Addtime.bat with administrator privileges from a computer running Windows NT. This batch file creates a list of member servers using the Windows NT Resource Kit utility Netdom.exe. The output of NETDOM gets redirected to a file, which in turn, gets parsed using the FOR command (part of Windows NT command extensions). The Addtime2.bat file gets called for each instance of \\ServerName within the Netdom.txt file. The Addtime2.bat file then issues the Windows NT Resource Kit utility Ntrights.exe to add Domain\Domain Users global group to each of the member servers Change the system time user right. The output of NTRIGHTS gets written to a file called Log.txt.

Filename: Addtime.bat 

echo off<br>
cls<br>
echo Creating a list of member servers.<br>
echo.<br>
netdom member &gt; netdom.txt<br>
echo Adding "Change System Time" right to Member Servers...<br>
echo.<br>
if exist log.txt del log.txt<br>
for /F "skip=6 tokens=4" %%a in (netdom.txt) do&#160;<br>
   call ADDTIME2.bat %%a<br>
echo.<br>
echo ----------------------------------------------<br>
echo - Done! Check LOG.TXT for status information.-<br>
echo ----------------------------------------------&#160;

Filename: ADDTIME2.BAT 

echo Adding right to %1...<br>
ntrights -u "domain users" -m %1 +r SeSystemTimePrivilege &gt;&gt; log.txt&#160;

Discuss this Article 6

Matt Brooks (not verified)
on Aug 26, 2000
Handy tool eh! But what does it mean when it returns this message ***Error*** OpenPolicy -1073610729
derrick mauldin (not verified)
on Oct 31, 2000
I ran this but I get an error in the log.txt file that says sorry wrong paramater. Please help!!!!
mike franco (not verified)
on Dec 15, 2000
Maybe I'm doing this wrong but.... I cut and pasted the bat scripts into two files and named them accordingly :Addtime.bat and ADDTIME2.BAT when I run the first it kicks out the server list but does not run the second file... should I have added something to the script ? If I manually execute the second one I get get a logfile which states I'm susung the wrong syntax ..

Please or Register to post comments.

Upcoming Training

Mastering System Center 2012

During over 6 hours of training you can join John Savill from your computer as he will walk you through the key components and capabilities of System Center 2012, what’s involved in using the components, and the benefit they can bring to your environment.

Register Now

Current Issue

May 2013 - The NameTranslate object is useful when you need to translate Active Directory object names between different formats, but it's awkward to use from PowerShell. Here's a PowerShell script that eliminates the awkwardness.

CURRENT ISSUE / ARCHIVE / SUBSCRIBE

Windows Forums

Get answers to questions, share tips, and engage with the Windows Community in our Forums.