Problem: I have line in the logon script: net time \\*servername* /set /yes I want to allow users without administrator privlages to update there system time . When i add this line to the login script they get a returned error message saying they do not have privellages to change time??? I have tried giving them rights through User Rights in User Manager, allowing them to change system time, but doesn't work. Any Ideas????

Hi! I don't no, what is the shortest answer. Do you try the Suss utility on Resource Kit cd? You have to install it to client, you able to start any command or utility with different account. It is not beautiful, but working.....

I have tried useing the NTrights command rom the resource Kit to enable the user group Domain User to change the System Time. However on logon they still do not have privilages and it returns a error message 1314.

My opinion, if your users aren't in administrator group, they can't change their rights. I think, here are 2 answers for your problem 1.- You have to write a script, which read all computer name of client from a file, and running NTRIGHTS command remotely for every computer in the domain. Example : - You are logged on as administrator or same privileges. - You have a text file, which contains all computer name of the domain. - You have a script(KIX or other), which reads computer name from the file, and running next command : NTRIGTHS -u "Domain Users" +r SeSystemtimePrivilege -m COMPUTERNAME There are 2 disadvantages : a.- Your users are ALWAYS able to change their system time, and if they can change....they will change it. b.- It is not a dinamic thing, because you have to refresh the computer names to input file. 2.- I think this is the good answer: - You have to add administrator privilege for all domain users, - Write a loginscript, which installs Suss utility to clients (Suss -install), because it is a service, and immediately reboot the client. - Remove the administrator privilege by domain users. If Suss is ok, write in loginscript next command : SU administratoruser password "net time \\*servername* /set /yes" -cb There is 1 disadvantage and several advantage! disadvantage : You have to add administrator rights and remove it advantage : The Domain Users don't change their system time, but the most important : You can start any program, what needed administrative rights by Domain Users.

Another option would be to install w32time.exe (replacement for nttime.exe) on all Workstations using the PDC as the time source. Updated w32time is available on MS FTP under reskit.

On client PC 1. Login as administrator 2. User Manager 3. Policies 4. User Rights 5. Right - Change the system time 6. Grant to add - add a group that all users belong to eg Domain Users Hope this helps!