Active Directory – Stop Updating Computer Time and Date

active-directorytimewindows-xp

This office runs an active directory on windows servers. Some 2003 DCs some 2008 R2 DCs

A user (The QA analyst) requested that he is able to change his time and it not be changed back after 5-10 minutes. The reason is he needs to see different time states for our website.

First off a couple issues spring to mind…

  1. What happens if he forgets to change it back?

  2. Will he be able to continue to use the resources of the domain if his time and date are out of sync? Exchange, shares, even to log on….?

What are some solutions to this issue I am sure this has come up many times in the past. I can see his user account or workstation computer in it's own OU with its own GPO but I am unsure where to go from there.

Best Answer

As long as he is not making changes to active directory the impact to the environment will be minimal. The user may have problems getting group policy updates and may have issues authenticating (but that can be fixed with a time reset and reboot) You will have to:

  1. sync time to a nonexistent timesource see Windows Time Service Tools and Settings this will prevent the domain from automatically repairing the time
  2. change the time manually.

you can keep the users machine in sync and allow him to have a time difference on a virtual machine rather than his workstation (windows virtual machine will allow this)

Related Topic