we've got a DC on Server 2003 the domain is running fine and all but I've got a problem with our external sites which are connected via the MPLS but not on the domain.
The shops are running thin clients with Win Xp embedded, we're trying to get their box time synced with the domain but I have no idea how to allow anonymous access only to sync time,
net time always returns with access denied and I would rather not leave any domain credentials anywhere in a scrypt on the box.
The exact time on the box really isn't that crucial as the boxes only create a RDP session but if the time is off by more than about 5 days then the connection is refused.
So the question is: how can I allow anonymous time sync with
net time or is there a better way to achieve the same thing?