Preventing Users from Changing System Time using GPO
Posted on 2011-09-17
I have an office running a Windows Server 2008 x64. In this office all workstations are running Windows 7 Pro x64.
Each user has their own workstation. They run an application that requires the user to be a local admin of the machine.
There is also a Time clock software that runs on each computer that each user uses to clock in and out throughout the day. Poor design of the software has left an opening that the time people clock in or out is based on the WORKSTATION time not the server time.
I have Atomic.exe running across the network to keep accurate times, but 2 employees have figured out how to change the time on their macines to suit there purposes.
I would like to create a GPO to control users from being able to make changes to their system clocks but have been unable to find the right place to lock this down.
Can anyone please point me to the proper directory to set this. I'm sure it is simple, but I am just not finding it.