Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 8829
  • Last Modified:

Group Policy - Disable Clock

How can I disable users clocks through group policy while giving them the ability to still see the clock.

I know you can Remove Clock from the system notification area. That I know how to do. My question is only - how can I make it so they can see the clock but not change it.
0
mspolter
Asked:
mspolter
1 Solution
 
Pete LongTechnical ConsultantCommented:
remove the priveledge "change system time"
0
 
Pete LongTechnical ConsultantCommented:

To do it on an individual PC
 local policy
start >run>gpedit.msc

expand local computer policy
expand computer configuration
expand windows settings
expand security settings
expand local policies
expand user right assignment

in the right side panel, there is a item titled 'change system time'
double click that and remove everyone exept system and domain admins/admins

To do it on the domain

Windows 2003 Creating and editing group policy

Group policies can be applied on a domain or an Organisational Unit, to apply a group policy in a 2003 domain environment, do the following.

On a domain controller open "Active directory Users and computers"

NOTE: As said above you can apply a GP to an OU in this instance we will deal with a domain GP, if you are concerned with a GP for an OU insert the "OU name" instead of the "Domain Name"

1. Locate the domain (top of the Tree) and right click it, then select "Properties"
2. Select the group policy Tab.
3. You will see the Default domain policy (and any other policies applied at this level)
4. You can create another domain policy by clicking "New" giving it a name and configuring it"
5. Ensure the default domain policy is highlighted and select "Edit" (unless you are working on another policy)
6. The Group policy object editor will open.
7. You can now edit the policy and close the editor when you are finished.
8. Back in the domain properties click "apply" and "OK"

Troubleshooting Group Policy in Windows Server 2003
http://www.microsoft.com/downloads/details.aspx?FamilyId=B24BF2D5-0D7A-4FC5-A14D-E91D211C21B2&displaylang=en

Group Policy Infrastructure White Paper
http://www.microsoft.com/downloads/details.aspx?FamilyId=D26E88BC-D445-4E8F-AA4E-B9C27061F7CA&displaylang=en

the policty is in the same place as above :)

0
 
mspolterAuthor Commented:
where can I find this option?
0
What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

 
mspolterAuthor Commented:
Thanks for the quick response
0
 
Pete LongTechnical ConsultantCommented:
ThanQ
0
 
garrtechCommented:
Excellent!  I've been trying to find this setting everywhere!  Thanks
0
 
Pete LongTechnical ConsultantCommented:
wow - 3 years since I answered this :)
0
 
maritborCommented:
Hi!
If a user is local admin on his computer, will it be enough to remove all groups in "change system time"?
I tried your solution above, but I still could change system time, I'm a local admin on my computer.

In the domian I am thinking about implementing this policy, all users are by default local admins on their computer.

Hope for a quick answer. Thanks in advance.
0

Featured Post

Become an Android App Developer

Ready to kick start your career in 2018? Learn how to build an Android app in January’s Course of the Month and open the door to new opportunities.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now