Solved

Group Policy - Disable Clock

Posted on 2004-08-26
8
8,601 Views
Last Modified: 2012-08-13
How can I disable users clocks through group policy while giving them the ability to still see the clock.

I know you can Remove Clock from the system notification area. That I know how to do. My question is only - how can I make it so they can see the clock but not change it.
0
Comment
Question by:mspolter
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
8 Comments
 
LVL 57

Expert Comment

by:Pete Long
ID: 11901915
remove the priveledge "change system time"
0
 
LVL 57

Accepted Solution

by:
Pete Long earned 100 total points
ID: 11901939

To do it on an individual PC
 local policy
start >run>gpedit.msc

expand local computer policy
expand computer configuration
expand windows settings
expand security settings
expand local policies
expand user right assignment

in the right side panel, there is a item titled 'change system time'
double click that and remove everyone exept system and domain admins/admins

To do it on the domain

Windows 2003 Creating and editing group policy

Group policies can be applied on a domain or an Organisational Unit, to apply a group policy in a 2003 domain environment, do the following.

On a domain controller open "Active directory Users and computers"

NOTE: As said above you can apply a GP to an OU in this instance we will deal with a domain GP, if you are concerned with a GP for an OU insert the "OU name" instead of the "Domain Name"

1. Locate the domain (top of the Tree) and right click it, then select "Properties"
2. Select the group policy Tab.
3. You will see the Default domain policy (and any other policies applied at this level)
4. You can create another domain policy by clicking "New" giving it a name and configuring it"
5. Ensure the default domain policy is highlighted and select "Edit" (unless you are working on another policy)
6. The Group policy object editor will open.
7. You can now edit the policy and close the editor when you are finished.
8. Back in the domain properties click "apply" and "OK"

Troubleshooting Group Policy in Windows Server 2003
http://www.microsoft.com/downloads/details.aspx?FamilyId=B24BF2D5-0D7A-4FC5-A14D-E91D211C21B2&displaylang=en

Group Policy Infrastructure White Paper
http://www.microsoft.com/downloads/details.aspx?FamilyId=D26E88BC-D445-4E8F-AA4E-B9C27061F7CA&displaylang=en

the policty is in the same place as above :)

0
 

Author Comment

by:mspolter
ID: 11901941
where can I find this option?
0
Salesforce Made Easy to Use

On-screen guidance at the moment of need enables you & your employees to focus on the core, you can now boost your adoption rates swiftly and simply with one easy tool.

 

Author Comment

by:mspolter
ID: 11902122
Thanks for the quick response
0
 
LVL 57

Expert Comment

by:Pete Long
ID: 11906638
ThanQ
0
 

Expert Comment

by:garrtech
ID: 20339579
Excellent!  I've been trying to find this setting everywhere!  Thanks
0
 
LVL 57

Expert Comment

by:Pete Long
ID: 20339869
wow - 3 years since I answered this :)
0
 

Expert Comment

by:maritbor
ID: 24323870
Hi!
If a user is local admin on his computer, will it be enough to remove all groups in "change system time"?
I tried your solution above, but I still could change system time, I'm a local admin on my computer.

In the domian I am thinking about implementing this policy, all users are by default local admins on their computer.

Hope for a quick answer. Thanks in advance.
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
On July 14th 2015, Windows Server 2003 will become End of Support, leaving hundreds of thousands of servers around the world that still run this 12 year old operating system vulnerable and potentially out of compliance in many organisations around t…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question