Microsoft KB Archive Search

Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

  1. Home
  2. "Access is denied" error message when a startup script uses Tzutil to set the time zone in Windows 7 SP1 or Windows Server 2008 R2 SP1

"Access is denied" error message when a startup script uses Tzutil to set the time zone in Windows 7 SP1 or Windows Server 2008 R2 SP1

View products that this article applies to.

Symptoms

Consider the following scenario:
  • You have a computer that is running Windows 7 Service Pack 1 (SP1) or Windows Server 2008 R2 SP1.
  • You have update 2592687 installed.
  • You configure a startup script in a Group Policy Object (GPO).
  • The startup script uses the Windows Time Zone Utility (Tzutil) to set the time zone on the computer.
In this scenario, the time zone can’t be set, and you receive the following error message in the event log:

Event ID: 1004
Description:
The attempt to set the system time zone to <time zone> returned error. Error code is 2147942405. Error message is "Access is denied".

↑ Back to the top

Cause

The issue occurs because the Group Policy client service doesn’t have permissions to set the time zone.

↑ Back to the top

Resolution

Important
Follow the steps in this section carefully. Serious problems might occur if you modify the registry incorrectly. Before you modify it, back up the registry for restoration in case problems occur.

To resolve the issue, log on to the affected computer as an administrator, and then follow these steps:
  1. Start Registry Editor.
  2. Locate and then right-click the following registry subkey:HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gpsvc
  3. Click Permissions, click Administrators, click to select the Allow check box for Full Control, then click OK.
  4. In the details pane, double-click the RequiredPrivileges entry.
  5. In the Value data list, type SeTimeZonePrivilege, and then click OK. This adds SeTimeZonePrivilege to the list.
  6. Exit Registry Editor, and then restart the computer.

↑ Back to the top

Keywords: kbtshoot, kbexpertiseadvanced, kb

↑ Back to the top

Article Info
Article ID : 2880607
Revision : 1
Created on : 1/7/2017
Published on : 8/23/2013
Exists online : False
Views : 492