Re: [Samba] samba as a time server (newby question): time not updated
Quoting Michael Wood [EMAIL PROTECTED]: Hi On Tue, Jun 20, 2006 at 07:17:53PM +1000, Ivan Teliatnikov wrote: Colleagues, I am trying to use my PDC as a time server. [snip] What do I need to do to ensure that time is synchronised on XP client when non-admin user logs into the machine. Why don't you just set up an NTP server on your Samba server and then point all the WinXP boxes at it. I think it's under Time in the control panel, or if you right-click on the time in the system tray. By default it syncs off time.windows.com or something like that. I am not a Windows person, so I don't know if you can do this via group policies or whatever. Policies - but the easiest is just changing the setting in the registry. Don't ask me where now, I'm to lazy to look - but it's in there, actually called ntp as well *shock horror* -- C -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba as a time server (newby question): time not updated
On 6/21/2006 4:41 AM, Thomas Heiligenmann wrote: Ivan Teliatnikov schrieb: On Tue, 2006-06-20 at 08:21 -0500, Adam Williams wrote: Sorry I haven't followed the thread, but if you use netlogon script, you can put in it net time \\server /set /yes I do use netlogon and the line is in the script. It starts working ONLY if the use who logs in has escalated (PowerUser or Admin) privileges on the machine, this is not possible because we use DOMAIN authentication. I still cannot understand why it does not work? Do you I need to change permissions on each client to allow non-admin users to change time? IIRC yes - you have to add 'SeSystemTimePrivilege' to the users. Under nt40 it's accessible under UserManager, there's also a command line tool named ntrights.exe, or you could try Samba's rpcclient... Setting the system time is, by default, a right reserved to members of the local Administrators and Power Users groups on the local machine. (Note that Domain Admins is a member of the local Administrators group.) This can be changed in group policy under Windows 2000/XP. In the group policy editor, look under Local Computer Policy\Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment. The policy name is Change the system time. This right can be assigned by domain group policy (though I'm not sure how to globally apply group policy in a Samba domain). It can also be assigned on Windows NT systems, but at the moment I can't recall how. As far as the Windows Time service that is included with Windows 2000 and later goes, be aware that it synchronizes to an Internet-based time server only once a week. In a Windows 2000 (or later) domain, the Windows Time service synchronizes with the domain controller. For a discussion of the Windows Time service, please see this Microsoft link: http://technet2.microsoft.com/WindowsServer/en/Library/a0fcd250-e5f7-41b3-b0e8-240f8236e2101033.mspx (Note: this link discusses Windows Server 2003, but I believe it mostly applies to XP and 2000 systems as well.) I have found that synchronizing once a week is sometimes not often enough -- a computer's clock can drift considerably in that time (I have seen anywhere from 1/2 sec per day to several seconds per day). For some applications, especially where the systems are in a regulated environment such as securities trading, this is far too much drift to be acceptable. A very useful utility I have found to improve this is Tom Horsley's NTPTime, which is an NTP client. You can download it here: http://home.att.net/~Tom.Horsley/ntptime.html As others have suggested, on your Samba server, be sure to run an NTP server. Configuring it can be daunting, so don't give up too easily. Once configured, it will keep the clock on your Samba server very accurate. Then configure your workstations and other servers to synchronize against the Samba server (instead of an Internet server, to keep the load on those servers down). -Jon Johnson Sutinen Consulting, Inc. www.sutinen.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba as a time server (newby question): time not updated
On Tue, 2006-06-20 at 08:21 -0500, Adam Williams wrote: Sorry I haven't followed the thread, but if you use netlogon script, you can put in it net time \\server /set /yes I do use netlogon and the line is in the script. It starts working ONLY if the use who logs in has escalated (PowerUser or Admin) privileges on the machine, this is not possible because we use DOMAIN authentication. I still cannot understand why it does not work? Do you I need to change permissions on each client to allow non-admin users to change time? -- Ivan Teliatnikov F09 Madsen Bld. School of Geosciences, University of Sydney phone: +612 9351 2031 mobile: +614 02 173 179 fax:+612 9351 3644 e-mail:[EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba as a time server (newby question): time not updated
Ivan Teliatnikov schrieb: On Tue, 2006-06-20 at 08:21 -0500, Adam Williams wrote: Sorry I haven't followed the thread, but if you use netlogon script, you can put in it net time \\server /set /yes I do use netlogon and the line is in the script. It starts working ONLY if the use who logs in has escalated (PowerUser or Admin) privileges on the machine, this is not possible because we use DOMAIN authentication. I still cannot understand why it does not work? Do you I need to change permissions on each client to allow non-admin users to change time? IIRC yes - you have to add 'SeSystemTimePrivilege' to the users. Under nt40 it's accessible under UserManager, there's also a command line tool named ntrights.exe, or you could try Samba's rpcclient... -- Thomas -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] samba as a time server (newby question): time not updated
Colleagues, I am trying to use my PDC as a time server. time server = yes upon login a group based scripts are executed. Scripts include line: net time \\samba.server /set /yes Time changes only if a user who logs was added Power Users Group on the local machine. My users belong to either staff, pgrads, ugrads, vis UNIX groups. What do I need to do to ensure that time is synchronised on XP client when non-admin user logs into the machine. Thank you in advance. -- Ivan Teliatnikov F09 Madsen Bld. School of Geosciences, University of Sydney phone: +612 9351 2031 mobile: +614 02 173 179 fax:+612 9351 3644 e-mail:[EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba as a time server (newby question): time not updated
On 6/20/06, Ivan Teliatnikov [EMAIL PROTECTED] wrote: Colleagues, I am trying to use my PDC as a time server. time server = yes upon login a group based scripts are executed. Scripts include line: net time \\samba.server /set /yes Time changes only if a user who logs was added Power Users Group on the local machine. My users belong to either staff, pgrads, ugrads, vis UNIX groups. What do I need to do to ensure that time is synchronised on XP client when non-admin user logs into the machine. You don't already have an NTP server cluster in your organisation? Windows machines do NTP quite nicely, with no admin rights issues, since it runs as a system service on the client. I know this only sidesteps the issue, but if you have NTP running already, I think you'll find the results are better. This was my experience, in any case. David -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba as a time server (newby question): time not updated
Hi On Tue, Jun 20, 2006 at 07:17:53PM +1000, Ivan Teliatnikov wrote: Colleagues, I am trying to use my PDC as a time server. [snip] What do I need to do to ensure that time is synchronised on XP client when non-admin user logs into the machine. Why don't you just set up an NTP server on your Samba server and then point all the WinXP boxes at it. I think it's under Time in the control panel, or if you right-click on the time in the system tray. By default it syncs off time.windows.com or something like that. I am not a Windows person, so I don't know if you can do this via group policies or whatever. Hope that helps :) -- Michael Wood [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba as a time server (newby question): time not updated
Sorry I haven't followed the thread, but if you use netlogon script, you can put in it net time \\server /set /yes -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba as a time server (newby question): time not updated
At 06:14 AM Tuesday, 6/20/2006, Michael Wood wrote -= Hi On Tue, Jun 20, 2006 at 07:17:53PM +1000, Ivan Teliatnikov wrote: Colleagues, I am trying to use my PDC as a time server. [snip] What do I need to do to ensure that time is synchronised on XP client when non-admin user logs into the machine. Why don't you just set up an NTP server on your Samba server and then point all the WinXP boxes at it. I think it's under Time in the control panel, or if you right-click on the time in the system tray. By default it syncs off time.windows.com or something like that. I am not a Windows person, so I don't know if you can do this via group policies or whatever. I use logon scripts for windows clients and add the following: NET TIME \\pdc_server_name /SET /YES I use ntpdate from a cron job to poll a stratum 2 time server which keeps the pdc up to date. Works well here Ed . . . . . . . . . . . . . . . . . . Randomly Generated Quote (1022 of 1055): Why do grandparents and grandchildren get along so well? They have the same enemy--the mother. -Claudette Colbert -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba as a time server (newby question): time not updated
On Tue, 2006-06-20 at 11:52 +0200, David Landgren wrote: On 6/20/06, Ivan Teliatnikov [EMAIL PROTECTED] wrote: Colleagues, I am trying to use my PDC as a time server. time server = yes upon login a group based scripts are executed. Scripts include line: net time \\samba.server /set /yes Time changes only if a user who logs was added Power Users Group on the local machine. My users belong to either staff, pgrads, ugrads, vis UNIX groups. What do I need to do to ensure that time is synchronised on XP client when non-admin user logs into the machine. You don't already have an NTP server cluster in your organisation? Windows machines do NTP quite nicely, with no admin rights issues, since it runs as a system service on the client. Thank you for the hint. I will do it in the future. However I am still left with a large number not knowing right time. This is very irritating largely due to human factor. net time \\samba.server /set /yes is in the netlogon scripts but it does not work. I know this only sidesteps the issue, but if you have NTP running already, I think you'll find the results are better. This was my experience, in any case. David -- Ivan Teliatnikov F09 Madsen Bld. School of Geosciences, University of Sydney phone: +612 9351 2031 mobile: +614 02 173 179 fax:+612 9351 3644 e-mail:[EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
