Solved

Group Policy - Disable Clock

Posted on 2004-08-26
8
8,502 Views
Last Modified: 2012-08-13
How can I disable users clocks through group policy while giving them the ability to still see the clock.

I know you can Remove Clock from the system notification area. That I know how to do. My question is only - how can I make it so they can see the clock but not change it.
0
Comment
Question by:mspolter
8 Comments
 
LVL 57

Expert Comment

by:Pete Long
Comment Utility
remove the priveledge "change system time"
0
 
LVL 57

Accepted Solution

by:
Pete Long earned 100 total points
Comment Utility

To do it on an individual PC
 local policy
start >run>gpedit.msc

expand local computer policy
expand computer configuration
expand windows settings
expand security settings
expand local policies
expand user right assignment

in the right side panel, there is a item titled 'change system time'
double click that and remove everyone exept system and domain admins/admins

To do it on the domain

Windows 2003 Creating and editing group policy

Group policies can be applied on a domain or an Organisational Unit, to apply a group policy in a 2003 domain environment, do the following.

On a domain controller open "Active directory Users and computers"

NOTE: As said above you can apply a GP to an OU in this instance we will deal with a domain GP, if you are concerned with a GP for an OU insert the "OU name" instead of the "Domain Name"

1. Locate the domain (top of the Tree) and right click it, then select "Properties"
2. Select the group policy Tab.
3. You will see the Default domain policy (and any other policies applied at this level)
4. You can create another domain policy by clicking "New" giving it a name and configuring it"
5. Ensure the default domain policy is highlighted and select "Edit" (unless you are working on another policy)
6. The Group policy object editor will open.
7. You can now edit the policy and close the editor when you are finished.
8. Back in the domain properties click "apply" and "OK"

Troubleshooting Group Policy in Windows Server 2003
http://www.microsoft.com/downloads/details.aspx?FamilyId=B24BF2D5-0D7A-4FC5-A14D-E91D211C21B2&displaylang=en

Group Policy Infrastructure White Paper
http://www.microsoft.com/downloads/details.aspx?FamilyId=D26E88BC-D445-4E8F-AA4E-B9C27061F7CA&displaylang=en

the policty is in the same place as above :)

0
 

Author Comment

by:mspolter
Comment Utility
where can I find this option?
0
 

Author Comment

by:mspolter
Comment Utility
Thanks for the quick response
0
Complete Microsoft Windows PC® & Mac Backup

Backup and recovery solutions to protect all your PCs & Mac– on-premises or in remote locations. Acronis backs up entire PC or Mac with patented reliable disk imaging technology and you will be able to restore workstations to a new, dissimilar hardware in minutes.

 
LVL 57

Expert Comment

by:Pete Long
Comment Utility
ThanQ
0
 

Expert Comment

by:garrtech
Comment Utility
Excellent!  I've been trying to find this setting everywhere!  Thanks
0
 
LVL 57

Expert Comment

by:Pete Long
Comment Utility
wow - 3 years since I answered this :)
0
 

Expert Comment

by:maritbor
Comment Utility
Hi!
If a user is local admin on his computer, will it be enough to remove all groups in "change system time"?
I tried your solution above, but I still could change system time, I'm a local admin on my computer.

In the domian I am thinking about implementing this policy, all users are by default local admins on their computer.

Hope for a quick answer. Thanks in advance.
0

Featured Post

Better Security Awareness With Threat Intelligence

See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

Join & Write a Comment

Numerous times I have been asked this questions that what is it that makes my machine log on so slow, there have been cases where computers took 23 minute exactly after taking password and getting to the desktop. Interesting thing was the fact th…
Scenerio: You have a server running Server 2003 and have applied a retail pack of Terminal Server Licenses.  You want to change servers or your server has crashed and you need to reapply the Terminal Server Licenses. When you enter the 16-digit lic…
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …
This video explains how to create simple products associated to Magento configurable product and offers fast way of their generation with Store Manager for Magento tool.

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now