Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Group Policy - Disable Clock

Posted on 2004-08-26
8
Medium Priority
?
8,785 Views
Last Modified: 2012-08-13
How can I disable users clocks through group policy while giving them the ability to still see the clock.

I know you can Remove Clock from the system notification area. That I know how to do. My question is only - how can I make it so they can see the clock but not change it.
0
Comment
Question by:mspolter
8 Comments
 
LVL 57

Expert Comment

by:Pete Long
ID: 11901915
remove the priveledge "change system time"
0
 
LVL 57

Accepted Solution

by:
Pete Long earned 400 total points
ID: 11901939

To do it on an individual PC
 local policy
start >run>gpedit.msc

expand local computer policy
expand computer configuration
expand windows settings
expand security settings
expand local policies
expand user right assignment

in the right side panel, there is a item titled 'change system time'
double click that and remove everyone exept system and domain admins/admins

To do it on the domain

Windows 2003 Creating and editing group policy

Group policies can be applied on a domain or an Organisational Unit, to apply a group policy in a 2003 domain environment, do the following.

On a domain controller open "Active directory Users and computers"

NOTE: As said above you can apply a GP to an OU in this instance we will deal with a domain GP, if you are concerned with a GP for an OU insert the "OU name" instead of the "Domain Name"

1. Locate the domain (top of the Tree) and right click it, then select "Properties"
2. Select the group policy Tab.
3. You will see the Default domain policy (and any other policies applied at this level)
4. You can create another domain policy by clicking "New" giving it a name and configuring it"
5. Ensure the default domain policy is highlighted and select "Edit" (unless you are working on another policy)
6. The Group policy object editor will open.
7. You can now edit the policy and close the editor when you are finished.
8. Back in the domain properties click "apply" and "OK"

Troubleshooting Group Policy in Windows Server 2003
http://www.microsoft.com/downloads/details.aspx?FamilyId=B24BF2D5-0D7A-4FC5-A14D-E91D211C21B2&displaylang=en

Group Policy Infrastructure White Paper
http://www.microsoft.com/downloads/details.aspx?FamilyId=D26E88BC-D445-4E8F-AA4E-B9C27061F7CA&displaylang=en

the policty is in the same place as above :)

0
 

Author Comment

by:mspolter
ID: 11901941
where can I find this option?
0
Nothing ever in the clear!

This technical paper will help you implement VMware’s VM encryption as well as implement Veeam encryption which together will achieve the nothing ever in the clear goal. If a bad guy steals VMs, backups or traffic they get nothing.

 

Author Comment

by:mspolter
ID: 11902122
Thanks for the quick response
0
 
LVL 57

Expert Comment

by:Pete Long
ID: 11906638
ThanQ
0
 

Expert Comment

by:garrtech
ID: 20339579
Excellent!  I've been trying to find this setting everywhere!  Thanks
0
 
LVL 57

Expert Comment

by:Pete Long
ID: 20339869
wow - 3 years since I answered this :)
0
 

Expert Comment

by:maritbor
ID: 24323870
Hi!
If a user is local admin on his computer, will it be enough to remove all groups in "change system time"?
I tried your solution above, but I still could change system time, I'm a local admin on my computer.

In the domian I am thinking about implementing this policy, all users are by default local admins on their computer.

Hope for a quick answer. Thanks in advance.
0

Featured Post

Visualize your virtual and backup environments

Create well-organized and polished visualizations of your virtual and backup environments when planning VMware vSphere, Microsoft Hyper-V or Veeam deployments. It helps you to gain better visibility and valuable business insights.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
Video by: ITPro.TV
In this episode Don builds upon the troubleshooting techniques by demonstrating how to properly monitor a vSphere deployment to detect problems before they occur. He begins the show using tools found within the vSphere suite as ends the show demonst…
Look below the covers at a subform control , and the form that is inside it. Explore properties and see how easy it is to aggregate, get statistics, and synchronize results for your data. A Microsoft Access subform is used to show relevant calcul…

963 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question