Frequently Asked Questions
NOTE: Information contained in this document is not supported by Technical Support. Simian, and other BSI products, are intended to be run by users with Administrator user access rights; therefore, information in this document is for informational purposes only.
NOTE: This document gives steps to change user rights to key areas of Windows. Care should be taken to ensure that user rights are kept in line with your company policy on computer usage and access rights. Please consult your IT professional if you are not sure of your company policy on this matter.
IntroductionYou are performing a TimeSync while logged into your Windows 2000 or XP computer as a restricted user, but the TimeSync does not appear to change the system clock as expected.
CauseRestricted users in Windows 2000 and XP are denied the ability to modify the system clock. To allow a restricted user to modify the system clock, the system administrator must grant the user specific access to modify the system clock.
SolutionTo grant restricted users proper access to modify the system clock, a program called the "Group Policy Editor" (gpedit.msc) is used. To use this application, you must be logged into Windows as the local administrator. If you do not have administrator rights, you must contact your system administrator before proceeding.
- Log into your computer as the local administrator.
- Go to the Start menu and choose Run. In the Open field of the window that pops up, type in "gpedit.msc" (without the quotes, see figure 1) and click OK.
Figure 1: This shows the "Run" window with gpedit.msc entered
- Within the Group Policy window, in the folder tree section on the left, expand the Windows Settings folder within the Computer Configuration section. Next, expand the Security Settings section, followed by expanding the Local Policies section.
- Single click on the User Rights Assignment section to highlight it, and then look on the right side. In the Policy column, look for an entry by the name of "Change the system time" (see figure 2). Double click on the "Change the system time" entry to open the properties window for this entry.
Figure 2: This is the Group Policy Editor interface, the Change the system time entry is highlighted
- Within the "Change the system time Properties" window, you will see a list of the users/groups that are currently allowed access to changing the system time (see figure 3).
Figure 3: The list shows that only Administrators and Power Users are allowed to change the system time.
- Click on the "Add User or Group" button to open the "Select Users or Groups" dialog box (as shown in figure 4). By default, the "From this location" field will have the workgroup or domain you have logged into.
NOTE: For this document’s purpose, we’ll be using the "Everyone" username, allowing any user that uses your machine to change the system time. Check with your IT professional to make sure this is compliant with your company policy. If you want to grant specific users or groups access rights while denying others, you will need to consult with your IT professional. User specific rights administration is a more advanced function than can be covered in this document and it is beyond its scope.
- Single left click into the "Enter the object names to select" text box, this will place a cursor in the text box allowing you to type. Enter the group name "Everyone", then click the Check Names button, if Windows is able to verify that the entry is valid, it will underline the group name. If it doesn’t recognize the name entered, the "Name Not Found" dialog box will pop-up allowing you to re-enter the name if it was mistyped.
Figure 4: This is the Select Users window with the object "Everyone" typed in after clicking the Check Names button. It is underlined because it is recognized username/group. The "From this location:" field indicates that Windows is to look at the BSI workgroup/domain for the user/group "Everyone".
- With the "Everyone" user entered and underlined (as shown in Figure 4), click on the OK button.
- Restart your computer and log in as the normal user of this machine and test to see if you can manually reset the system clock. You can do this by double clicking on the clock in the system tray (in the lower right hand corner of your desktop).
- If you receive a warning that you are not allowed to modify the system clock, repeat steps 1-4, or consult your IT professional for assistance.
ConclusionWith the above steps, you are now able to have any user that uses your machine modify your system clock and therefore use the TimeSync function of Simian. Now, all your Simian users will be able to have their clock keep in sync. For information on setting up the TimeSync function within Simian, see the Simian manual supplied with your software. The Simian manual can also be downloaded from www.bsiusa.com.