Solved

Group Policy - Disable Clock

Posted on 2004-08-26
8
8,689 Views
Last Modified: 2012-08-13
How can I disable users clocks through group policy while giving them the ability to still see the clock.

I know you can Remove Clock from the system notification area. That I know how to do. My question is only - how can I make it so they can see the clock but not change it.
0
Comment
Question by:mspolter
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
8 Comments
 
LVL 57

Expert Comment

by:Pete Long
ID: 11901915
remove the priveledge "change system time"
0
 
LVL 57

Accepted Solution

by:
Pete Long earned 100 total points
ID: 11901939

To do it on an individual PC
 local policy
start >run>gpedit.msc

expand local computer policy
expand computer configuration
expand windows settings
expand security settings
expand local policies
expand user right assignment

in the right side panel, there is a item titled 'change system time'
double click that and remove everyone exept system and domain admins/admins

To do it on the domain

Windows 2003 Creating and editing group policy

Group policies can be applied on a domain or an Organisational Unit, to apply a group policy in a 2003 domain environment, do the following.

On a domain controller open "Active directory Users and computers"

NOTE: As said above you can apply a GP to an OU in this instance we will deal with a domain GP, if you are concerned with a GP for an OU insert the "OU name" instead of the "Domain Name"

1. Locate the domain (top of the Tree) and right click it, then select "Properties"
2. Select the group policy Tab.
3. You will see the Default domain policy (and any other policies applied at this level)
4. You can create another domain policy by clicking "New" giving it a name and configuring it"
5. Ensure the default domain policy is highlighted and select "Edit" (unless you are working on another policy)
6. The Group policy object editor will open.
7. You can now edit the policy and close the editor when you are finished.
8. Back in the domain properties click "apply" and "OK"

Troubleshooting Group Policy in Windows Server 2003
http://www.microsoft.com/downloads/details.aspx?FamilyId=B24BF2D5-0D7A-4FC5-A14D-E91D211C21B2&displaylang=en

Group Policy Infrastructure White Paper
http://www.microsoft.com/downloads/details.aspx?FamilyId=D26E88BC-D445-4E8F-AA4E-B9C27061F7CA&displaylang=en

the policty is in the same place as above :)

0
 

Author Comment

by:mspolter
ID: 11901941
where can I find this option?
0
MS Dynamics Made Instantly Simpler

Make Your Microsoft Dynamics Investment Count  & Drastically Decrease Training Time by Providing Intuitive Step-By-Step WalkThru Tutorials.

 

Author Comment

by:mspolter
ID: 11902122
Thanks for the quick response
0
 
LVL 57

Expert Comment

by:Pete Long
ID: 11906638
ThanQ
0
 

Expert Comment

by:garrtech
ID: 20339579
Excellent!  I've been trying to find this setting everywhere!  Thanks
0
 
LVL 57

Expert Comment

by:Pete Long
ID: 20339869
wow - 3 years since I answered this :)
0
 

Expert Comment

by:maritbor
ID: 24323870
Hi!
If a user is local admin on his computer, will it be enough to remove all groups in "change system time"?
I tried your solution above, but I still could change system time, I'm a local admin on my computer.

In the domian I am thinking about implementing this policy, all users are by default local admins on their computer.

Hope for a quick answer. Thanks in advance.
0

Featured Post

Want Experts Exchange at your fingertips?

With Experts Exchange’s latest app release, you can now experience our most recent features, updates, and the same community interface while on-the-go. Download our latest app release at the Android or Apple stores today!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

by Batuhan Cetin In this article I will be guiding through the process of removing a failed DC metadata from Active Directory (hereafter, AD) using the ntdsutil tool in a Windows Server 2003 environment. These steps are not necessary in a Win…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…
Michael from AdRem Software outlines event notifications and Automatic Corrective Actions in network monitoring. Automatic Corrective Actions are scripts, which can automatically run upon discovery of a certain undesirable condition in your network.…

617 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question