How to allow a specific Restricted User to change Date/Time?

G

Guest

Guest
Archived from groups: microsoft.public.win2000.security (More info?)

I know it is possible and simple on Win 2000 Pro since I did it few years
ago but don't remember how....
I remember that it was simply providing that user modification access right
to some folder\file but don't remember which one.

Thanks,
David
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.security (More info?)

Changing system time is a user right. Open Local Security Policy [
secpol.msc] and go to security settings/local policies/user rights and find
the user right for change system time and add the user/group that you want
to have this user right. If this is a domain computer, you may have to make
the change at the domain/OU level if effective settings show different than
local settings after the policy has refreshed. -- Steve


"David F" <David-White@earthlink.net> wrote in message
news:%23uWibpAEFHA.1292@TK2MSFTNGP10.phx.gbl...
>I know it is possible and simple on Win 2000 Pro since I did it few years
> ago but don't remember how....
> I remember that it was simply providing that user modification access
> right
> to some folder\file but don't remember which one.
>
> Thanks,
> David
>
>
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.security (More info?)

"Steven L Umbach" <n9rou@n0-spam-for-me-comcast.net> wrote in message
news:mNadnR5GiKZK_pHfRVn-rw@comcast.com...
> Changing system time is a user right. Open Local Security Policy [
> secpol.msc] and go to security settings/local policies/user rights and
find
> the user right for change system time and add the user/group that you want
> to have this user right. If this is a domain computer, you may have to
make
> the change at the domain/OU level if effective settings show different
than
> local settings after the policy has refreshed. -- Steve
>
>
> "David F" <David-White@earthlink.net> wrote in message
> news:%23uWibpAEFHA.1292@TK2MSFTNGP10.phx.gbl...
> >I know it is possible and simple on Win 2000 Pro since I did it few years
> > ago but don't remember how....
> > I remember that it was simply providing that user modification access
> > right
> > to some folder\file but don't remember which one.
> >
> > Thanks,
> > David
> >
> >
>
>
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.security (More info?)

Hi,

There is a policy that you can edit. You can do this either in local or
group policy if the computer is member of domain. After you open appropriate
policy editor (e.g. gpedit.msc for local policy) drill down

Computer Configuration\Windows Settings\Security Settings\Local
Policies\User Rights Assignment

Add user account or better yet add group which members will be able to
change system time.

http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/529.mspx

--
Mike
Microsoft MVP - Windows Security

"David F" <David-White@earthlink.net> wrote in message
news:%23uWibpAEFHA.1292@TK2MSFTNGP10.phx.gbl...
>I know it is possible and simple on Win 2000 Pro since I did it few years
> ago but don't remember how....
> I remember that it was simply providing that user modification access
> right
> to some folder\file but don't remember which one.
>
> Thanks,
> David
>
>
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.security (More info?)

Hi,

I wrote that the quetion pertains to Win 2K, not XP. but thanks anyway.

David


Miha Pihler [MVP]" <mihap-news@atlantis.si> wrote in message
news:%23Am3yyAEFHA.3780@TK2MSFTNGP09.phx.gbl...
> Hi,
>
> There is a policy that you can edit. You can do this either in local or
> group policy if the computer is member of domain. After you open
appropriate
> policy editor (e.g. gpedit.msc for local policy) drill down
>
> Computer Configuration\Windows Settings\Security Settings\Local
> Policies\User Rights Assignment
>
> Add user account or better yet add group which members will be able to
> change system time.
>
>
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/529.mspx
>
> --
> Mike
> Microsoft MVP - Windows Security
>
> "David F" <David-White@earthlink.net> wrote in message
> news:%23uWibpAEFHA.1292@TK2MSFTNGP10.phx.gbl...
> >I know it is possible and simple on Win 2000 Pro since I did it few years
> > ago but don't remember how....
> > I remember that it was simply providing that user modification access
> > right
> > to some folder\file but don't remember which one.
> >
> > Thanks,
> > David
> >
> >
>
>
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.security (More info?)

OK. Glad it worked. FYI Mike's method was also the same. Many of the
configuration settings for Windows 2000 and Windows XP are the same and
often we can not find a link for one operating system or the other so we
post what will work regardless of the operating system. --- Steve


"David F" <David-White@earthlink.net> wrote in message
news:OkyQQiBEFHA.1264@TK2MSFTNGP12.phx.gbl...
>
> "Steven L Umbach" <n9rou@n0-spam-for-me-comcast.net> wrote in message
> news:mNadnR5GiKZK_pHfRVn-rw@comcast.com...
>> Changing system time is a user right. Open Local Security Policy [
>> secpol.msc] and go to security settings/local policies/user rights and
> find
>> the user right for change system time and add the user/group that you
>> want
>> to have this user right. If this is a domain computer, you may have to
> make
>> the change at the domain/OU level if effective settings show different
> than
>> local settings after the policy has refreshed. -- Steve
>>
>>
>> "David F" <David-White@earthlink.net> wrote in message
>> news:%23uWibpAEFHA.1292@TK2MSFTNGP10.phx.gbl...
>> >I know it is possible and simple on Win 2000 Pro since I did it few
>> >years
>> > ago but don't remember how....
>> > I remember that it was simply providing that user modification access
>> > right
>> > to some folder\file but don't remember which one.
>> >
>> > Thanks,
>> > David
>> >
>> >
>>
>>
>
>
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.security (More info?)

I know, but the policy is in exactly the same place for Windows 2000,
Windows XP and Windows 2003.

--
Mike
Microsoft MVP - Windows Security

"David F" <David-White@earthlink.net> wrote in message
news:uCXB6jBEFHA.612@TK2MSFTNGP15.phx.gbl...
> Hi,
>
> I wrote that the quetion pertains to Win 2K, not XP. but thanks anyway.
>
> David
>
>
> Miha Pihler [MVP]" <mihap-news@atlantis.si> wrote in message
> news:%23Am3yyAEFHA.3780@TK2MSFTNGP09.phx.gbl...
>> Hi,
>>
>> There is a policy that you can edit. You can do this either in local or
>> group policy if the computer is member of domain. After you open
> appropriate
>> policy editor (e.g. gpedit.msc for local policy) drill down
>>
>> Computer Configuration\Windows Settings\Security Settings\Local
>> Policies\User Rights Assignment
>>
>> Add user account or better yet add group which members will be able to
>> change system time.
>>
>>
> http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/529.mspx
>>
>> --
>> Mike
>> Microsoft MVP - Windows Security
>>
>> "David F" <David-White@earthlink.net> wrote in message
>> news:%23uWibpAEFHA.1292@TK2MSFTNGP10.phx.gbl...
>> >I know it is possible and simple on Win 2000 Pro since I did it few
>> >years
>> > ago but don't remember how....
>> > I remember that it was simply providing that user modification access
>> > right
>> > to some folder\file but don't remember which one.
>> >
>> > Thanks,
>> > David
>> >
>> >
>>
>>
>
>
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.security (More info?)

Since no one mentioned, and it is not clear that this is a
standalone W2k Pro, . . .
if this is in an AD domain, even though you have just been
provided with information on how to grant the account the
ability, this is not something that you should do.
All domain members should be managing their time/date
so that they are, within drift, lockstepped with the forest
timeservers.

--
Roger Abell
Microsoft MVP (Windows Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"David F" <David-White@earthlink.net> wrote in message
news:%23uWibpAEFHA.1292@TK2MSFTNGP10.phx.gbl...
> I know it is possible and simple on Win 2000 Pro since I did it few years
> ago but don't remember how....
> I remember that it was simply providing that user modification access
right
> to some folder\file but don't remember which one.
>
> Thanks,
> David
>
>