Standard users cannot sync clock after Windows Autopilot

Aaron Seet 726 Reputation points
2020-03-26T16:31:43.25+00:00

We notice that every time after Windows Autopilot OOBE setup procedure, Windows has a nasty habit of offsetting the time to our regional time zone. Except, the system clock was already in tune with our time zone. So the clock advances 8 or 15 hours ahead for no good reason.

That's a massive annoyance since standard users don't have the permission to change date and time.

But, it's already set to synchronise with time.windows.com, yes? Except, the Windows Time service doesn't run, and the [Sync now] button only ever results in "Time synchronisation failed" errors.

Can't find anything within Intune (administrative templates, device restrictions) that can allow users a chance to correct this on their own.

What's supposed to be the proper method to correct this misconfiguration?

Windows 10 Setup
Windows 10 Setup
Windows 10: A Microsoft operating system that runs on personal computers and tablets.Setup: The procedures involved in preparing a software program or application to operate within a computer or mobile device.
1,947 questions
{count} vote

Accepted answer
  1. Aaron Seet 726 Reputation points
    2020-03-27T03:28:22.497+00:00

    For now a workaround is for users to boot into laptop BIOS and correct the date/time from there.

    But surely, there're some areas of Windows (+ Intune) that need to be addressed to fix this at the OS level.

    UPDATE

    Also, looks like the jump to 8 or 15 hours depends on which keyboard layout (US or UK) was chosen at OOBE setup. I think that is highly unncessary.


3 additional answers

Sort by: Most helpful
  1. Aaron Seet 726 Reputation points
    2020-03-30T11:18:09.503+00:00

    Have been trying to fiddle with the Policy CSP

    https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-userrights#userrights-changesystemtime

    ./Vendor/MSFT/Policy/Config/UserRights/ChangeSystemTime

    set with payload

    <![CDATA[AdministratorsLOCAL SERVICEUsers]]>  
    

    Despite some errors in Intune, I see the target OSes did have their local group policies adjusted for [Change the system time]. However standard users still cannot adjust the clock date & time. I don't know what else is missing.

    https://github.com/MicrosoftDocs/windows-itpro-docs/issues/6367

    1 person found this answer helpful.
    0 comments No comments

  2. Sebastian Cerazy 316 Reputation points
    2020-08-25T09:00:12.713+00:00

    Anybody has any more ideas?
    Or do I really have to use a script to do "modern web management"?

    But even with script (running as System), it seems not possible!

    C:\Windows>w32tm /resync /rediscover
    Sending resync command to local computer
    The following error occurred: Access is denied. (0x80070005)
    

    I can get it to work running as TrustedInstaller, but at this point we are getting to really silly situation!

    Have not yet tested, but was told that scheduled task does work

    schtasks /Create /F /RU SYSTEM /RL HIGHEST /SC HOURLY /TN SysTimeResync /TR "cmd /c w32tm /resync"
    schtasks /Run /I /TN SysTimeResync
    

    Or one can use http://www.timesynctool.com/
    Download: Installer: NetTimeSetup-314.exe (Version 3.14


  3. Dillon Silzer 57,426 Reputation points
    2022-06-29T22:44:13.94+00:00

    We had somewhat of similar issues with our time sync in our corporate sites. We noticed deploying intune (Azure AD connected) devices outside corporate firewalls had the right time while devices inside the network didn't. We were stumped for a bit as devices were previously connected to a local domain controller that set the times of AD connected devices.

    Just a suggestion that you should check if UDP Port 123 is open on your network. Once we allowed the port to communicate with time.windows.com, our time synchronized at all of our corporate sites.

    https://learn.microsoft.com/en-us/windows-server/networking/windows-time-service/windows-time-service-tools-and-settings

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.