?
Solved

Prevent change of system time on a network

Posted on 2007-03-28
6
Medium Priority
?
314 Views
Last Modified: 2013-12-28
I have a network that we are adding a program so they can clock-in from their workstations. I use roaming profiles.

Each workstation gets the system time from the server, but they can change the time at their workstation.

I want to prevent this from tempting them to change the time if they are late.

Is there a way to prevent the ability of changing time on their workstations. But allow the administrator rights to do so if necessary.

0
Comment
Question by:proffittware
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
6 Comments
 
LVL 86

Expert Comment

by:jkr
ID: 18811725
You can do that by removin gthe SeSystemTimePrivilege privilege from their accounts. This privilege is usually granted to Administrators and Power Users. See http://support.microsoft.com/kb/279664 ("How to Set Logon User Rights with the Ntrights.exe Utility") for how to do that on the command prompt and http://support.microsoft.com/kb/300022/ ("You cannot set the date, time, or time zone on your computer") for a description about what that privilege does. BTW, this can also be administered using the "Local Security Policy" control panel applet.
0
 
LVL 5

Accepted Solution

by:
epochasset earned 2000 total points
ID: 18811754
You can do this in Group Policy, however due to possible variations in time between machines it would be best to use a solution that will only record times at the server, meaning that the workstation's time is never used and is irrelevant.  They clock in and out from the workstation, but the server's time is used for both values.  If they dont have access to the server you will get the most accurate representation of the time spent even if you ever run into a problem with external time synch.

The group policy setting your looking for is in, Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> User Rights Assignment.  Youll find 'Change the system time' as well as 'Change the time zone'.
0
 
LVL 3

Expert Comment

by:Zsoldier
ID: 18811764
You can use the NTRight utility to prevent users from changing their system time clock.
http://support.microsoft.com/?kbid=315276 
0
What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

 
LVL 86

Expert Comment

by:jkr
ID: 18811771
Oh, since this is the NT4 area, you'll find th eprivilege management in the "User Manager" control panel applet, IIRC.
0
 

Author Comment

by:proffittware
ID: 18815577
I will check these out and get back to all of you !!!

0
 

Expert Comment

by:aws910
ID: 18838197
For what it's worth... I had the same problem one time.  It was with a primitive MS-Access based timeclock system.  My solution was to set the app up so it does a time-sync with the server each time the person clocks in/out.  Specifically, I had a single line of vba code that called a "shell" command on a "net time" command.  The whole thing just flashed a command-prompt box in the taskbar and nobody noticed.  It actually resolved some minor time adjustment issues as a nice side-effect and most people thanked me for it.

This worked adequately for a couple years, but my good friend "Windows Vista" decided I should be denied access to these commands, so I rewrote the app to run in PHP.  
0

Featured Post

Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The Windows functions GetTickCount and timeGetTime retrieve the number of milliseconds since the system was started. However, the value is stored in a DWORD, which means that it wraps around to zero every 49.7 days. This article shows how to solve t…
Determining the an SCCM package name from the Package ID
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…
Suggested Courses

764 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question