How can I restrict time/date change ?

Hi, I just want to know if it's possible (and how) to lock time and date for all users in a Windows 2000 Domain.

Some users are playing too much with systems' clock and we don't want that.

Thanks in advance !
blueshaolinAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

ryansotoCommented:
Sure its called Group Policy!
0
ryansotoCommented:
Here is an article to get you started.  I have to jet right now but the over view is
create a group policy object that disallwos chnaging the time.  No you have to link this GPO to the organization unit where all the computers are located, by default the 'computers' OU
This will then say apply the 'do not allow time changes' policy to the computer OU.  So no matter who logs onto the computer or which computer the policy will apply.

http://www.oreilly.com/catalog/win2000ads/chapter/ch08.html
0
blueshaolinAuthor Commented:
.... but how ? ....
0
Cloud Class® Course: MCSA MCSE Windows Server 2012

This course teaches how to install and configure Windows Server 2012 R2.  It is the first step on your path to becoming a Microsoft Certified Solutions Expert (MCSE).

ryansotoCommented:
Create a GPO, and linking it.  Step by step guide!

http://technet.microsoft.com/en-us/library/bb742376.aspx
0
Brian PiercePhotographerCommented:
Users can only change the system time/date if they are local admins or power users - Most users should not be either.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
blueshaolinAuthor Commented:
Thanks ryansoto:

Ok... I already have applied some group policies to our domain.... I just don't know where I can find the parameters to lock it.
0
ryansotoCommented:
I dont have access to a win2k box but look through the settings its there.  You jus create a gpo an dlink it
I know in win2k3 it says some like prevent changing time.
0
oBdACommented:
Is there a specific reason that your users are at least Power Users, if not local Administrators on their machines?
Regular users aren't allowed to change the time, so if they don't require PU/Admin privileges (which they shouldn't), remove these group memberhsips, and they won't be able to change the date anymore, either.
0
Brian PiercePhotographerCommented:
I did point that out in a previous comment oBdA - but reply came there none.
0
oBdACommented:
Correct, sorry, missed that.
0
Feroz AhmedSenior Network EngineerCommented:
Hi,
You can do so by means of Bios Setup from where you can deny access to system clocks or else through Group policy also you can do so.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 2000

From novice to tech pro — start learning today.