[Samba] Fwd: most common way to implement 'net time' privileges

[Liutauras Adomaitis]

On Thu, Aug 27, 2009 at 3:14 PM, Witold Tosta<witold.tosta at neostrada.pl> wrote:
> Liutauras Adomaitis pisze:
>>
>> On Wed, Aug 26, 2009 at 6:11 PM, Volker
>> Lendecke<Volker.Lendecke at sernet.de> wrote:
>>>
>>> On Wed, Aug 26, 2009 at 06:05:35PM +0300, Liutauras Adomaitis wrote:
>>>>
>>>> now size is few times larger. Try it now
>>>> http://www.infosaitas.lt/logas.txt
>>>
>>> Normally a "Device is not functioning" (or so) means an
>>> NT_STATUS_UNSUCCESSFUL error message. I don't see any such
>>> error message in the logs. When *exactly* did the error
>>> happen when you took the log?
>>>
>>
>> I looked through the logs again - no line with NT_STATUS_UNSUCCESSFUL.
>>
>> I found other thing (look below). It says
>> ldapsam_getsampwsid: Unable to locate SID
>> [S-1-5-21-1376040910-2644421868-2724539926-513]
>> Could this be the problem?
>>
>
> I have the same issue on samba 3.4.0. Previously I thought all usrmgr.exe's
> features does not work for Samba, but only for NT 4.0.
>
> The issue comes out when using the latest version 5.2.3790.1127 of
> usrmgr.exe. The previous ones shipped with Windows NT 4.0 Server and Windows
> 2000 Server (4.0.1371.1 and versions 5.0.2195.6601) work well, but in both
> there are no changing time policy setting in the menu of policy --> user
> rights settings group :-)
>
> Allowing Domain Users setting time for their machines via time change
> settings (clock settings on right bottom corner of windows desktop) or via
> logon.bat for example I resolved adding Domain User Group into the policy
> called "Allow user time change" under secpol.msc utility from Windows XP
> Professional workstation.

How did you do that with logon.bat?