I want my XP clients to update their clocks from my samba server. I have time server = yes in smb.conf, and running ntpd on the server, but my clients aren't updating their clocks. I tried running the command manually logged in as a domain user: net time /setsntp:10.8.2.3 but it just says "System error 5 has occurred. Access is denied". Any ideas?
On Thu, 2007-12-06 at 10:34 -0600, Adam Williams wrote:> I want my XP clients to update their clocks from my samba server. I > have time server = yes in smb.conf, and running ntpd on the server, but > my clients aren't updating their clocks. I tried running the command > manually logged in as a domain user: > > net time /setsntp:10.8.2.3 > > but it just says "System error 5 has occurred. Access is denied". > > Any ideas?Setting the clock is generally a privileged operation. You can manually set it only if you have the right privileges locally on the machine (admin has them but there are registry settings somewhere to relax the constraint for normal users iirc). Simo. -- Simo Sorce Samba Team GPL Compliance Officer <simo@samba.org> Senior Software Engineer at Red Hat Inc. <ssorce@redhat.com>
Thu, Dec 06, 2007 at 10:34:51AM -0600, Adam Williams napsal(a):> I want my XP clients to update their clocks from my samba server. I > have time server = yes in smb.conf, and running ntpd on the server, but > my clients aren't updating their clocks. I tried running the command > manually logged in as a domain user: > > net time /setsntp:10.8.2.3 > > but it just says "System error 5 has occurred. Access is denied".Domain user isn't allowed to change w32time service. I'm not sure if time server mean ntp time server ... I have to change more settings on client side in w32time service. (e.g. start the service ;o) ) But still if the time differ for more than X minutes/hours it fails. So I have to add net time /set command to windows XP startup. Regards, Luf
Hallo, Adam, Du (awilliam) meintest am 06.12.07:> I want my XP clients to update their clocks from my samba server. I > have time server = yes in smb.conf, and running ntpd on the server, > but my clients aren't updating their clocks. I tried running the > command manually logged in as a domain user:> net time /setsntp:10.8.2.3> but it just says "System error 5 has occurred. Access is denied".http://arktur.de/FAQ/28_42_de.html You may allow nonprivileged users changing the system time via "gpedit.msc". Viele Gruesse! Helmut
Adam Williams wrote:> I want my XP clients to update their clocks from my samba server. I > have time server = yes in smb.conf, and running ntpd on the server, > but my clients aren't updating their clocks. I tried running the > command manually logged in as a domain user: > > net time /setsntp:10.8.2.3 > > but it just says "System error 5 has occurred. Access is denied". > Any ideas? >The relationship of "net time" and a real ntp server seems to be a one time sync only anyway. However, you can have the PC really use ntp: :: setup ntp client :: need to be an admin - one time setup sc stop w32time w32tm /unregister w32tm /register net time /setsntp:ntpd-server sc config w32time start= auto sc start w32time w32tm /resync w32tm /stripchart /computer:ntpd-server /samples:1 Could instead use a real Policy or manually jam it into the registry: :: setup ntp client :: need to be an admin - one time setup reg add HKLM\SOFTWARE\Policies\microsoft\w32time /f reg add HKLM\SOFTWARE\Policies\microsoft\w32time\Parameters /f reg add HKLM\SOFTWARE\Policies\microsoft\w32time\TimeProviders /f reg add HKLM\SOFTWARE\Policies\microsoft\w32time\TimeProviders\NtpClient /f reg add HKLM\SOFTWARE\Policies\microsoft\w32time\Parameters /v NtpServer /d ntpd-server /f reg add HKLM\SOFTWARE\Policies\microsoft\w32time\Parameters /v Type /d NTP /f reg add HKLM\SOFTWARE\Policies\microsoft\w32time\TimeProviders\NtpClient /v Enabled /t REG_DWORD /d 0x1 /f reg add HKLM\SOFTWARE\Policies\microsoft\w32time\TimeProviders\NtpClient /v CrossSiteSyncFlags /t REG_DWORD /d 0x2 reg add HKLM\SOFTWARE\Policies\microsoft\w32time\TimeProviders\NtpClient /v ResolvePeerBackoffMinutes /t REG_DWORD /d 0xf reg add HKLM\SOFTWARE\Policies\microsoft\w32time\TimeProviders\NtpClient /v ResolvePeerBackoffMaxTimes /t REG_DWORD /d 0x7 reg add HKLM\SOFTWARE\Policies\microsoft\w32time\TimeProviders\NtpClient /v SpecialPollInterval /t REG_DWORD /d 0xe10 reg add HKLM\SOFTWARE\Policies\microsoft\w32time\TimeProviders\NtpClient /v EventLogFlags /t REG_DWORD /d 0x0 gpudate /target:computer /force -- Toby Bluhm Midwest Instruments Inc. 30825 Aurora Road Suite 100 Solon Ohio 44139 440-424-2240
> but it just says "System error 5 has occurred. Access is denied". > > Any ideas?Yep. As far as I know, regular users do not have the right to change the time. You need to have admin rights. (or at least power user, I'm not sure) What I do: I use tardis K9 (http://www.kaska.demon.co.uk/) on workstations to listen for ntp broadcasts from my pdc. K9 then corrects the time on the workstation. K9 is _very_ small and light, ands runs as a service. I like it. Only don't forget to add K9 to your windows firewall exceptions.
Hi Adam, try this: "How to configure an authoritative time server in Windows XP: Configuring the Windows Time service to use an external time source" http://support.microsoft.com/kb/314054/EN-US/#EXTERNAL or http://support.microsoft.com/kb/314054/EN-US I had the same problem some months ago. Trying to set the client?s time in the user?s logon scripts always brought me an "access denied" error for the already given reasons. If I remember right, it was this article that finally helped me out. This way the system time is set but the users are prevented from changing the time themselves. Greetings, Petri On Thu, 06 Dec 2007 10:34:51 -0600, Adam Williams <awilliam@mdah.state.ms.us> wrote:> I want my XP clients to update their clocks from my samba server. I > have time server = yes in smb.conf, and running ntpd on the server, but > my clients aren't updating their clocks. I tried running the command > manually logged in as a domain user: > > net time /setsntp:10.8.2.3 > > but it just says "System error 5 has occurred. Access is denied". > > Any ideas? > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/listinfo/samba
Adam Williams wrote:> I want my XP clients to update their clocks from my samba server. I > have time server = yes in smb.conf, and running ntpd on the server, but > my clients aren't updating their clocks. I tried running the command > manually logged in as a domain user: > > net time /setsntp:10.8.2.3 > > but it just says "System error 5 has occurred. Access is denied". > Any ideas? >As an admin user, from the command prompt in windows try: net time \\server /set /yes It has worked for me for years. -- David C. Rankin, J.D., P.E. Rankin Law Firm, PLLC 510 Ochiltree Street Nacogdoches, Texas 75961 Telephone: (936) 715-9333 Facsimile: (936) 715-9339 www.rankinlawfirm.com