I want to configure Windows Time Settings as a non-administrator user and without using an elevated command prompt. I gave permission to user to change the system time from User Rights Assignments. Also I gave full control to user in registry for W32Time keys.

I can run commands such as:

  • w32tm /query /peers
  • w32tm /query /status
  • w32tm /query /configuration
  • w32tm /query /source
  • w32tm /resync
  • w32tm /config

without any problem but when I try to run:

  • w32tm /config /update
  • w32tm /unregister or /register

I encounter with Access Denied problem.

In order to run these commands as user, which permissions should I give to user?

  • 1
    Even as an Administrator, one has to elevate the permissions of the command prompt, before running the /update and /register commands. However, just to make sure I understand what you have done. Have you specifically given the user ownership over HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\w32time\Config? – Ramhound Oct 12 '18 at 16:17

You seem to have added the user to the "Change the system time" policy (link), and this should have worked. Security rules on Windows do change rapidly and without notice.

You might try the classical trick of using the Task Scheduler for Elevated Program Shortcut without UAC Prompt and let the user run the task using the command Schtasks /Run. However, I'm unsure if this still works with the latest Windows 10.

If all fails, the Technet program Run As GUI might be another solution. It keeps the entered Administrator password in a safe and encrypted format.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.