Solved

Change Time

Posted on 2016-08-08
5
51 Views
Last Modified: 2016-09-04
Can a local admin change the time on a domain pc?
0
Comment
Question by:daise703
  • 4
5 Comments
 
LVL 5

Expert Comment

by:Manuel Flores
ID: 41748084
Depends on your domain Global Policy configuration.  Here is some explanation on how to push out local administrators:

https://community.spiceworks.com/how_to/907-gpo-to-push-out-local-administrators-across-a-domain
0
 

Author Comment

by:daise703
ID: 41748086
I gave a domain user local admin rights on his pc so he could change the time on his box. When he tries to change the time he relieves a message that states he does not have the permission to change the time.
0
 
LVL 5

Expert Comment

by:Manuel Flores
ID: 41748092
OK.  However, if you had configured this directive in your domain;

change the system time
Computer Configuration\Windows Settings\Security Settings\Account Policies\

Could prevent all the users and groups no explicitly defined in the directive from changing the system time.
0
 
LVL 5

Accepted Solution

by:
Manuel Flores earned 500 total points
ID: 41748097
I have tried in my domain.  An administrator user called Rafa can change the system time.  Then I configured the directive mentioned above in the Default domain policy adding just my domain user, not Rafa of course.

In a given PC, using gpupdate /force doesn't worked!!... the user Rafa could change the system time :(

Despite of this, I logged off and on the user and this is the result trying to change the system time.  It is in spanish but I think it is clear;

Can't change system time
0
 
LVL 5

Expert Comment

by:Manuel Flores
ID: 41748098
You could use this same directive to explicitly allow your user/s to change the system time.
0

Featured Post

VMware Disaster Recovery and Data Protection

In this expert guide, you’ll learn about the components of a Modern Data Center. You will use cases for the value-added capabilities of Veeam®, including combining backup and replication for VMware disaster recovery and using replication for data center migration.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Find out how to use Active Directory data for email signature management in Microsoft Exchange and Office 365.
This script can help you clean up your user profile database by comparing profiles to Active Directory users in a particular OU, and removing the profiles that don't match.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

24 Experts available now in Live!

Get 1:1 Help Now