In my network all domain users are given local administrator rights.
I need to given permissions for changing system time for all users thats the reason I have added them to local admin group's.
Taking this as advantage users are misusing system resources, Is there any config change where I can allow users to have only permissions for modifying system time & nothing else Like installing software & modifying system files like hosts file etc