Time and Date correction when end-user do not have admin rights

Can you SSH in to it and correct it from the session remotely?

This might help

https://github.com/talkingmoose/Jamf-Scripts/blob/master/Set%20Time%20Zone.sh

Thanks @sdunbar

I'm reading the github script. Not having actually ran it, I believe this is setting the timezone to be automatic (that's what the description says)

Does it also do the auto time and date checkbox? From System Preference > Date & Time, these are actually different things.

Thanks @sdunbar

You've given me the idea of seeking how to set Date and Time automatically.

terminal line is this:
sudo systemsetup -setusingnetworktime on

I have now included this in my Policy + script, testing it now.

I think I got it

systemsetup -setnetworktimeserver $NTP_SERVER

systemsetup -setusingnetworktime on

I just found out ntpdate is no longer a function of macOS Mojave. That's why it is failing to update the time server for Macbooks that have time out of sync.

Still doesn't work.

I can fix up my script, but without the Date and time being within 5 minutes of the JAMF Pro server, it will never communicate with the Macbook having the issue. User also do not have admin rights to fix this themselves :(

Here's the error I get when I manually trigger it off:

sudo jamf policy
sudo: ignoring time stamp from the future
Password:
Error getting version information from the JSS. Attempting to gather the information from a policy request...

There was an error.

     Clock Skew Error - There is a discrepancy between the local time and the JSS server time.

Thanks @zoeleech :)

Thank you for this. I think it is the closest I can get to to making JAMF Pro connect with Self Service Client, having this flag set to "no maximum"

I have tested this, no, the clock will not reset for a date/time that is more than 2 years old.

So the new process is:
- Set this JAMF Pro Max Time Skew change to no maximum
- Push out policy to grant admin rights to the user of the offending Macbook
- Have the user update the date & time themselves
- Remove admin rights

@Bernard.Huang

What if you put a policy in Self Service that called a script to update the time from your preferred time server?

sudo sntp -sS time.apple.com

That will work in Mojave, and it could be left in SS all the time; I can't see what harm a user could do by running the policy if there time was up to date.

try using PKGBUILD to wrap your time set script up in an executable pkg file and send it to them.
they just double click and boom your back in business baby.
all the instructions on how are in the link

I have this EXACT issue also with some older 2015 MacBook pros who's batteries were not replaced while under warranty and when they go to Zero they reset the time to like 2010 etc and cant communicate with the JAMF SERVER, I have tried some scripts but has anyone come up with something I can load offline in self service and offer as a fix for this issue?

I just wanted to add that you can open up the time and date preference pane to all users, instead of just admins.

security authorizationdb write system.preferences allow
security authorizationdb write system.preferences.datetime allow
security authorizationdb write system.preferences.timemachine allow

I haven't tested on the latest version of Catalina.