I am running a Samba domain controller with LDAP integration. I have at least some workstations which do not seem to be syncing the time with the DC at all. My first instinct is to simply set the time with a logon script, but of course that runs as the user, whom does not have permission to set the system time. I would prefer to get it working right, to where the system syncs its time with the time server runnong in the DC. I have tried to find the cause. net time \\dc1 works fine. There are no entries in the event log regarding a failure to sync with the time server. What can I do to find out why it's not syncing? thanks, -wes
you can go to those computers and do a regedit change to give users the ability to change the time. wes wrote:> I am running a Samba domain controller with LDAP integration. I have at > least some workstations which do not seem to be syncing the time with the DC > at all. My first instinct is to simply set the time with a logon script, but > of course that runs as the user, whom does not have permission to set the > system time. I would prefer to get it working right, to where the system > syncs its time with the time server runnong in the DC. > > I have tried to find the cause. net time \\dc1 works fine. There are no > entries in the event log regarding a failure to sync with the time server. > What can I do to find out why it's not syncing? > > thanks, > -wes >
Hallo, wes, Du (samba) meintest am 14.01.09:> I am running a Samba domain controller with LDAP integration. I have > at least some workstations which do not seem to be syncing the time > with the DC at all.[...] One way: group policies. On each Client. Another way: Batch "settime.bat" on each client: @echo off set Server=<IP-address> ping -n 1 -w 1 %Server% | find "(0%" if errorlevel 0 net time %Server% /set /yes And this batch is run as an administrator task with the option "run when the computer starts". You have to define this task on each client, too. ------------------------ Calling an NTP server also needs changes on every client. And it's not related to Samba. It has to be run as a service, and I couldn't manage it correctly - my W2000 clients called the predefined NTP servers (NIST and MS) sometimes instead of my Samba server's NTP server, and that doesn't work in a LAN where a router doesn't allow NTP calls into the WAN. Viele Gruesse! Helmut
On 1/16/2009, L.P.H. van Belle (obell@bazuin.nl) wrote:> Or better add the domain users group to the policy that allows users > to change the time.The problem is, lots of programs just won't work right without a user having power user perms... For me, its easier to give them the perms, then just restrict the ability to run unapproved executables... -- Best regards, Charles
wes wrote:> I am running a Samba domain controller with LDAP integration. I have at > least some workstations which do not seem to be syncing the time with the DC > at all. My first instinct is to simply set the time with a logon script, but > of course that runs as the user, whom does not have permission to set the > system time. I would prefer to get it working right, to where the system > syncs its time with the time server runnong in the DC. > > I have tried to find the cause. net time \\dc1 works fine. There are no > entries in the event log regarding a failure to sync with the time server. > What can I do to find out why it's not syncing?Although the literature suggests that the workstations should be able to find the time server automatically since it is running on the domain controller, that does not appear to be true. The error message received is "Member of an NT4 domain. Cannot synchronize." So maybe it only works in AD style domains, not NT4 style domains. Run this little batch file once on your XP workstations to get them syncing with your ntp server on your local network. The ntp server may or may not be the samba server. Of course, you have to edit the IP address of your ntp server. rem - filename XPtime.bat rem - this works for windows xp to set up syncing with our ntp time server net time /setsntp:192.168.254.35 net stop w32time net start w32time Note that the procedure is different for Win2000 workstations. Let me know if you need that too. Mark Nienberg