Link to home
Start Free TrialLog in
Avatar of rmusick
rmusick

asked on

Command Line way to Lock the Users out of changing the system time

We have an issue in our labs and classrooms where we need to disable the ability to change the time on the workstations.  I know I can do this from the GPO under:
Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment

"Change the system time" Setting
but this only works if you are physically logged into the computer.

Is there a way to do this via command line through our desktop management system (Altiris) since these workstations are not part of the domain.
Avatar of wantabe2
wantabe2
Flag of United States of America image

you have two option...

1. regular users do not have the rights to change system time so you could change the users permissions back to standard user...

2. Start>run>type gpedit.msc

The setting is located under Computer Configuration, Windows Settings, Local Policies, User Rights Assignment, "Change the system time".
Avatar of johnb6767
3. Using cacls from a CMD line to deny access to the applet.....

cacls c:\windows\system32\timedate.cpl /d USERNAME
Avatar of rmusick
rmusick

ASKER

Needs to be applied all users on the workstations Except the administrator..
ASKER CERTIFIED SOLUTION
Avatar of junior15
junior15

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of rmusick

ASKER

Worked Great!  It did exactly what I wanted. Thanks
Glad I could help.