rmusick
asked on
Command Line way to Lock the Users out of changing the system time
We have an issue in our labs and classrooms where we need to disable the ability to change the time on the workstations. I know I can do this from the GPO under:
Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment
"Change the system time" Setting
but this only works if you are physically logged into the computer.
Is there a way to do this via command line through our desktop management system (Altiris) since these workstations are not part of the domain.
Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment
"Change the system time" Setting
but this only works if you are physically logged into the computer.
Is there a way to do this via command line through our desktop management system (Altiris) since these workstations are not part of the domain.
3. Using cacls from a CMD line to deny access to the applet.....
cacls c:\windows\system32\timeda te.cpl /d USERNAME
cacls c:\windows\system32\timeda
ASKER
Needs to be applied all users on the workstations Except the administrator..
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Worked Great! It did exactly what I wanted. Thanks
Glad I could help.
1. regular users do not have the rights to change system time so you could change the users permissions back to standard user...
2. Start>run>type gpedit.msc
The setting is located under Computer Configuration, Windows Settings, Local Policies, User Rights Assignment, "Change the system time".