Solved

Prevent change of system time on a network

Posted on 2007-03-28
6
312 Views
Last Modified: 2013-12-28
I have a network that we are adding a program so they can clock-in from their workstations. I use roaming profiles.

Each workstation gets the system time from the server, but they can change the time at their workstation.

I want to prevent this from tempting them to change the time if they are late.

Is there a way to prevent the ability of changing time on their workstations. But allow the administrator rights to do so if necessary.

0
Comment
Question by:proffittware
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
6 Comments
 
LVL 86

Expert Comment

by:jkr
ID: 18811725
You can do that by removin gthe SeSystemTimePrivilege privilege from their accounts. This privilege is usually granted to Administrators and Power Users. See http://support.microsoft.com/kb/279664 ("How to Set Logon User Rights with the Ntrights.exe Utility") for how to do that on the command prompt and http://support.microsoft.com/kb/300022/ ("You cannot set the date, time, or time zone on your computer") for a description about what that privilege does. BTW, this can also be administered using the "Local Security Policy" control panel applet.
0
 
LVL 5

Accepted Solution

by:
epochasset earned 500 total points
ID: 18811754
You can do this in Group Policy, however due to possible variations in time between machines it would be best to use a solution that will only record times at the server, meaning that the workstation's time is never used and is irrelevant.  They clock in and out from the workstation, but the server's time is used for both values.  If they dont have access to the server you will get the most accurate representation of the time spent even if you ever run into a problem with external time synch.

The group policy setting your looking for is in, Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> User Rights Assignment.  Youll find 'Change the system time' as well as 'Change the time zone'.
0
 
LVL 3

Expert Comment

by:Zsoldier
ID: 18811764
You can use the NTRight utility to prevent users from changing their system time clock.
http://support.microsoft.com/?kbid=315276 
0
Don't Cry: How Liquid Web is Ensuring Security

WannaCry is just the start. Read how Liquid Web is protecting itself and its customers against new threats.

 
LVL 86

Expert Comment

by:jkr
ID: 18811771
Oh, since this is the NT4 area, you'll find th eprivilege management in the "User Manager" control panel applet, IIRC.
0
 

Author Comment

by:proffittware
ID: 18815577
I will check these out and get back to all of you !!!

0
 

Expert Comment

by:aws910
ID: 18838197
For what it's worth... I had the same problem one time.  It was with a primitive MS-Access based timeclock system.  My solution was to set the app up so it does a time-sync with the server each time the person clocks in/out.  Specifically, I had a single line of vba code that called a "shell" command on a "net time" command.  The whole thing just flashed a command-prompt box in the taskbar and nobody noticed.  It actually resolved some minor time adjustment issues as a nice side-effect and most people thanked me for it.

This worked adequately for a couple years, but my good friend "Windows Vista" decided I should be denied access to these commands, so I rewrote the app to run in PHP.  
0

Featured Post

Secure Your WordPress Site: 5 Essential Approaches

WordPress is the web's most popular CMS, but its dominance also makes it a target for attackers. Our eBook will show you how to:

Prevent costly exploits of core and plugin vulnerabilities
Repel automated attacks
Lock down your dashboard, secure your code, and protect your users

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I was prompted to write this article after the recent World-Wide Ransomware outbreak. For years now, System Administrators around the world have used the excuse of "Waiting a Bit" before applying Security Patch Updates. This type of reasoning to me …
A small collection of useful tips and tricks for Windows 10 users that I decided to write as a result of recent questions that were asked and answered at Experts Exchange. Two short video tutorials included. Enjoy..
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
If you’ve ever visited a web page and noticed a cool font that you really liked the look of, but couldn’t figure out which font it was so that you could use it for your own work, then this video is for you! In this Micro Tutorial, you'll learn yo…

729 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question