Solved

Stop user from changing system time

Posted on 2008-10-19
7
2,159 Views
Last Modified: 2013-12-04
Is there any software our there that blocks the user from accessing the system time settings so they don't change it. Of course there would have to be an administrator function so someone that needs to change the time could but for the regular user can not. The regular users are administrators on their computer and have to be due to other constraints so group policies won't work. I've searched the internet and did not receive alot of good hits. I need it to be XP and vista compatible.  Any suggestions?
0
Comment
Question by:cobolinx1
7 Comments
 
LVL 2

Expert Comment

by:mariu-eg
Comment Utility
Local Security Policy, Change system time, if you remove Administrators from it, they cannot change the time. They can add them self to it though. But thats the downside of let them be administrators.
0
 
LVL 58

Assisted Solution

by:tigermatt
tigermatt earned 200 total points
Comment Utility

Push the change through the central domain Group Policy, in Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment. It is called 'Change the system time', and you can centrally control it on all the workstations from there. I suggest you just allow the DOMAIN\Domain Admins group the privilege.

The domain-based GPO overrides any settings locally on a workstation, so by setting it centrally, users should not be able to edit it using their local gpedit.msc. And for security, I would suggest you restrict gpedit.msc for non-Domain Admins anyway - it can be restricted in User Config > Admin Templates > Windows Components > Microsoft Management Console > Restricted/Permitted Snap-ins.

-tigermatt
0
 

Author Comment

by:cobolinx1
Comment Utility
No not force accept I need to test if this solution will work in my scenario.
0
Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

 

Author Comment

by:cobolinx1
Comment Utility
Sorry.. DO not force accept. This may take a week or two.
0
 
LVL 17

Accepted Solution

by:
kadadi_v earned 300 total points
Comment Utility
Your procedure is like this..................RIght...?
You have to run this procedure on every workstation coz your are working in workgroup with administartor login....
1. Go to start --> run --> key in gpedit.msc
2. Navigate to Computer Configuration --> windows settings --> security settings --> Local policies --> User Rights management
3. Look for Change the system time on right panel.
4. Remove all the users and groups.

But we remove the administrator then who will do...?
Try with this also:-
http://www.petri.co.il/forums/showthread.php?t=11166

Regards,
VIjay kadadi
0
 

Author Comment

by:cobolinx1
Comment Utility
Thanks kadadi that was a good link. They may not always be connected to network so would group policies still work? That's why I was looking at a third party alternative instead of group policies.
0
 
LVL 58

Expert Comment

by:tigermatt
Comment Utility

Group Policies are cached on the machine, so when it is disconnected from the network, they will still apply.

-tigermatt
0

Featured Post

Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

Container Orchestration platforms empower organizations to scale their apps at an exceptional rate. This is the reason numerous innovation-driven companies are moving apps to an appropriated datacenter wide platform that empowers them to scale at a …
If you're not part of the solution, you're part of the problem.   Tips on how to secure IoT devices, even the dumbest ones, so they can't be used as part of a DDoS botnet.  Use PRTG Network Monitor as one of the building blocks, to detect unusual…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now