Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I am a developer in need of doing some temporal unit testing on my local XP box. I am local admin but there is a group policy enforced centrally that prohibits changing local time (a severe case of managment treating in-house devs same as every other user in the company).

I wonder if there is a way to bypass the group policy using my admin privileges and get the job done. Thanks!

share|improve this question
    
possible duplicate of Can I override a group policy setting as a machine admin? –  Evan Anderson Jan 5 '11 at 17:09
2  
even if there is, be wary: Windows domain authentication is Kerberos-based, and therefore very time-sensitive. If the local clock is out of sync with the domain controller's by more than X (default 5) minutes, the DC will assume replay attack and deny access. After that logons won't work, Windows filesharing... just about everything uses those tickets. –  Michael Lowman Jan 5 '11 at 17:16
    
And why should they treat devs any differently? Are you special? Have you described your need to do this to management or are you assuming that they just instinctively know what you need? –  joeqwerty Jan 5 '11 at 18:23

2 Answers 2

Have you considered (and I know this is not the exact answer you were looking for) injecting some mocked/stub time functions into the code you are trying to test? It may achieve the results you want, without having to tinker with the time, and be tests you can run elsewhere (like on a CI server, where you really wouldn't want to change the real time).

share|improve this answer
    
No, it wouldn't be possible pass the date/time on this specific occassion: I'm trying to test that after the change execution enviroment's "local" time comes from a remote server and not the system clock. Hence I need a visible difference between the two. –  H. Stieglits Jan 12 '11 at 14:32

If you change your workstation time, you break Kerberos, which is part of AD. Don't do it. If you need a test machine, get a test machine that's not part of the domain.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.