samba - Nov 2003 - Syncing time for non-Admin logons? - net time \\superserver /set /yes

I have in my smb.conf file the following entries:
time server = yes

and 

logon script = startup.bat

Where logon script is as follow:

-----start script -----
NET TIME \\SUPERSERVER /SET /YES
# Here we map network drives to shares on the Samba Server

echo Mapping Network Drives to Samba Server Theremin
net use s: \\superserver\scratch
net use r: \\superserver\share

\\virusserver\Antivirus\PCCSRV\AUTOPCC.EXE
-----end script -----

The NET TIME command seems to be runable only by the local admin.  The 
\\superserver is a Solaris9 box running samba 3.0.1pre3 and also acts as an 
ntp server.

Does anyone have suggestions as to how to have my samba clients update with 
the server?

Cheers
Jeff


-- 
Jeff Gardiner [ gardiner@imaging.robarts.ca ]
System Administrator - Imaging Research Laboratories
Robarts Research Institute - London ON, Canada
519.663.5777 x34089

       ~~~~~~~
  Those who do not understand Unix are condemned to reinvent it, poorly.
        -- Henry Spencer
~~~~~~

if your problem is about priviliges, then change the local policies on 
each machine you want this to be done.

you must run on each w2k computer gpedit.msc as Administrator (START MENU 
-> RUN), then look for this key (I'll put in spanish):

CONFIGURACION DEL EQUIPO -> CONFIGURACION DE WINDOWS -> CONFIGURACION DE 
SEGURIDAD -> DIRECTIVAS LOCALES -> ASIGNACION DE DERECHOS DE USUARIO ->
CHANGE THE SYSTEM TIME

And enable for ALL USERS the last policy (add the user if necessary).

After this, any one can change the time on this computer. You can disable 
any changes on the task bar by modifing the windows register, this will 
disable access to the clock by a user under the w2k environment. So you 
end with a computer which updates its time against a server on each login, 
but the user can't modify the time locally.

Hope it helps.

-- 
Ing. Romy Perez Moreno
e-mail: romy@fenix.uam.mx, romy@correo.azc.uam.mx
http://fenix.uam.mx/romy
tel: 5318 9067 /  5382-7157

On Wed, 19 Nov 2003, Jeff Gardiner wrote:
> I have in my smb.conf file the following entries:
> time server = yes
>
> and
>
> logon script = startup.bat
>
> Where logon script is as follow:
>
> -----start script -----
> NET TIME \\SUPERSERVER /SET /YES
> # Here we map network drives to shares on the Samba Server
>
> echo Mapping Network Drives to Samba Server Theremin
> net use s: \\superserver\scratch
> net use r: \\superserver\share
>
> \\virusserver\Antivirus\PCCSRV\AUTOPCC.EXE
> -----end script -----
>
> The NET TIME command seems to be runable only by the local admin.  The
> \\superserver is a Solaris9 box running samba 3.0.1pre3 and also acts as an
> ntp server.
>
> Does anyone have suggestions as to how to have my samba clients update with
> the server?
Yes. You need to log onto each client as the local machine
'Administrator'
and give each user the privilidge to adjust the system time. Do this in
control panel -> Adminsitrative Tools -> Computer Management -> Local
Security Settings (can't remember details - I'm on a site where I
can't
check it now), then locate the right entry so the local registry gets
updated so "Domain Users' get the right to change the system time.

- John T.
-- 
John H Terpstra
Email: jht@samba.org

On Thu, 20 Nov 2003 00:29 , John H Terpstra <jht@samba.org> sent:
>On Wed, 19 Nov 2003, Jeff Gardiner wrote:
>
>> I have in my smb.conf file the following entries:
>> time server = yes
>>
>> and
>>
>> logon script = startup.bat
>>
>> Where logon script is as follow:
>>
>> -----start script -----
>> NET TIME \\SUPERSERVER /SET /YES
>> # Here we map network drives to shares on the Samba Server
>>
>> echo Mapping Network Drives to Samba Server Theremin
>> net use s: \\superserver\scratch
>> net use r: \\superserver\share
>>
>> \\virusserver\Antivirus\PCCSRV\AUTOPCC.EXE
>> -----end script -----
>>
>> The NET TIME command seems to be runable only by the local admin.  The
>> \\superserver is a Solaris9 box running samba 3.0.1pre3 and also acts
as an
>> ntp server.
>>
>> Does anyone have suggestions as to how to have my samba clients update
with
>> the server?
>
>Yes. You need to log onto each client as the local machine
'Administrator'
>and give each user the privilidge to adjust the system time. Do this in
>control panel -> Adminsitrative Tools -> Computer Management ->
Local
>Security Settings (can't remember details - I'm on a site where I
can't
>check it now), then locate the right entry so the local registry gets
>updated so "Domain Users' get the right to change the system time.
>
>- John T.
>-- 
>John H Terpstra
>Email: jht@samba.org
>-- 
>To unsubscribe from this list go to the following URL and read the
>instructions:  http://lists.samba.org/mailman/listinfo/samba
>

I found this all most annoying myself (permissions and all)...if you can install
NTP on a machine within your network, you can use the W32time service to sync
(net
time /setstp:ntp.yourdomain.com

It works just as well, if not better



---- Prudential Preferred Properties   www.prupref.com