Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I'm working in a MS Windows Domain.

I'm trying to centrally (remotely) start and stop the W32Time service for a certain amount of time (to disable Time Server update e.g for two hours) then remotely change system date and time to allow users with low power (they can't start and stop the service and change time) to do some backdated operations. When the amount of time then finish, I want to start back the W32Time again to allow the auto sync of the system clock.

I've tried this with WMI, but my problem is that when I try to start back the service the time skew is too big and I can't do WMI operations.

Is it possible to do this?

I'm wondering if a solution maybe to put a shell file (that maybe finally deletes itself) on the remote system and then launch it with Admin privileges (using somenthing like PsExec). In that case I don't need to be granted by the DC and the time skew may not be a problem.

Maybe this is a more viable way?

share|improve this question
    
Finally I came up with modifying my requirements. I wrote and distributed a simple c# exe with the start/stop time service and a form to request new date/time. This exe is remotely launched with admin privileges. This solved with quite little effort. –  Andrea Colleoni Jan 12 '12 at 9:41
add comment

2 Answers 2

Why not just change the time names of the files?

http://www.nirsoft.net/utils/bulk_file_changer.html

If you insist on the Gordian Knot method, then you'll need to run the commands under the local Admin account. The reason your WMI operations fail is because the workstation is trying to get authentication from the DC and the DC rejects it due to its invalid security token.

share|improve this answer
    
The tool you suggest is a good tool only for a part of my problem. The backdated activity is quite more complicated. –  Andrea Colleoni Oct 15 '11 at 13:44
add comment

You can setup schedule tasks through Group Policy. If you put it in the "Computer Configuration" section, it will get system privileges which should allow it to do anything.

You may also allow users to trigger tasks themselves, but I am not sure if credentials are needed to trigger system tasks.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.