Solved

Prevent change of system time on a network

Posted on 2007-03-28
6
305 Views
Last Modified: 2013-12-28
I have a network that we are adding a program so they can clock-in from their workstations. I use roaming profiles.

Each workstation gets the system time from the server, but they can change the time at their workstation.

I want to prevent this from tempting them to change the time if they are late.

Is there a way to prevent the ability of changing time on their workstations. But allow the administrator rights to do so if necessary.

0
Comment
Question by:proffittware
6 Comments
 
LVL 86

Expert Comment

by:jkr
Comment Utility
You can do that by removin gthe SeSystemTimePrivilege privilege from their accounts. This privilege is usually granted to Administrators and Power Users. See http://support.microsoft.com/kb/279664 ("How to Set Logon User Rights with the Ntrights.exe Utility") for how to do that on the command prompt and http://support.microsoft.com/kb/300022/ ("You cannot set the date, time, or time zone on your computer") for a description about what that privilege does. BTW, this can also be administered using the "Local Security Policy" control panel applet.
0
 
LVL 5

Accepted Solution

by:
epochasset earned 500 total points
Comment Utility
You can do this in Group Policy, however due to possible variations in time between machines it would be best to use a solution that will only record times at the server, meaning that the workstation's time is never used and is irrelevant.  They clock in and out from the workstation, but the server's time is used for both values.  If they dont have access to the server you will get the most accurate representation of the time spent even if you ever run into a problem with external time synch.

The group policy setting your looking for is in, Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> User Rights Assignment.  Youll find 'Change the system time' as well as 'Change the time zone'.
0
 
LVL 3

Expert Comment

by:Zsoldier
Comment Utility
You can use the NTRight utility to prevent users from changing their system time clock.
http://support.microsoft.com/?kbid=315276
0
Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

 
LVL 86

Expert Comment

by:jkr
Comment Utility
Oh, since this is the NT4 area, you'll find th eprivilege management in the "User Manager" control panel applet, IIRC.
0
 

Author Comment

by:proffittware
Comment Utility
I will check these out and get back to all of you !!!

0
 

Expert Comment

by:aws910
Comment Utility
For what it's worth... I had the same problem one time.  It was with a primitive MS-Access based timeclock system.  My solution was to set the app up so it does a time-sync with the server each time the person clocks in/out.  Specifically, I had a single line of vba code that called a "shell" command on a "net time" command.  The whole thing just flashed a command-prompt box in the taskbar and nobody noticed.  It actually resolved some minor time adjustment issues as a nice side-effect and most people thanked me for it.

This worked adequately for a couple years, but my good friend "Windows Vista" decided I should be denied access to these commands, so I rewrote the app to run in PHP.  
0

Featured Post

The problems with reply email signatures

Do you wish that you could place an email signature under a reply? Well, unfortunately, you can't. That great Exchange/Office 365 signature you've created will just appear at the bottom of an email chain. What a pain! Is there really no way to solve this? Well, there might be...

Join & Write a Comment

Join Greg Farro and Ethan Banks from Packet Pushers (http://packetpushers.net/podcast/podcasts/pq-show-93-smart-network-monitoring-paessler-sponsored/) and Greg Ross from Paessler (https://www.paessler.com/prtg) for a discussion about smart network …
If you need to start windows update installation remotely or as a scheduled task you will find this very helpful.
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
This Micro Tutorial will give you a basic overview of Windows DVD Burner through its features and interface. This will be demonstrated using Windows 7 operating system.

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now