Command Line way to Lock the Users out of changing the system time

Posted on 2011-10-10
Last Modified: 2012-06-27
We have an issue in our labs and classrooms where we need to disable the ability to change the time on the workstations.  I know I can do this from the GPO under:
Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment

"Change the system time" Setting
but this only works if you are physically logged into the computer.

Is there a way to do this via command line through our desktop management system (Altiris) since these workstations are not part of the domain.
Question by:rmusick
    LVL 15

    Expert Comment

    you have two option...

    1. regular users do not have the rights to change system time so you could change the users permissions back to standard user...

    2. Start>run>type gpedit.msc

    The setting is located under Computer Configuration, Windows Settings, Local Policies, User Rights Assignment, "Change the system time".
    LVL 66

    Expert Comment

    3. Using cacls from a CMD line to deny access to the applet.....

    cacls c:\windows\system32\timedate.cpl /d USERNAME

    Author Comment

    Needs to be applied all users on the workstations Except the administrator..
    LVL 6

    Accepted Solution

    The command line tool "ntrights.exe" from the 2k/2k3 resource kit will let you set user-rights. If your software allows you to run a command remotely, you could use it to revoke the right to change the clock from a specific group of users across all your computers.

    Something like this should do the trick:  ntrights.exe -r SeSystemTimePrivilege -u "Users"

    Hope this helps.

    Author Closing Comment

    Worked Great!  It did exactly what I wanted. Thanks
    LVL 6

    Expert Comment

    Glad I could help.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Find Ransomware Secrets With All-Source Analysis

    Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

    This is a little timesaver I have been using for setting up Microsoft Small Business Server (SBS) in the simplest possible way. It may not be appropriate for every customer. However, when you get a situation where the person who owns the server is i…
    Issue: Unstable cursor in Windows XP and Windows runs extremely slow in that any click will bring up the Hour glass (sometimes for several seconds before giving you what you want) . Troubleshooting Process and the FINAL FIX: This issue see…
    Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
    In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now