Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Change Time

Posted on 2016-08-08
5
Medium Priority
?
69 Views
Last Modified: 2016-09-04
Can a local admin change the time on a domain pc?
0
Comment
Question by:daise703
  • 4
5 Comments
 
LVL 5

Expert Comment

by:Manuel Flores
ID: 41748084
Depends on your domain Global Policy configuration.  Here is some explanation on how to push out local administrators:

https://community.spiceworks.com/how_to/907-gpo-to-push-out-local-administrators-across-a-domain
0
 

Author Comment

by:daise703
ID: 41748086
I gave a domain user local admin rights on his pc so he could change the time on his box. When he tries to change the time he relieves a message that states he does not have the permission to change the time.
0
 
LVL 5

Expert Comment

by:Manuel Flores
ID: 41748092
OK.  However, if you had configured this directive in your domain;

change the system time
Computer Configuration\Windows Settings\Security Settings\Account Policies\

Could prevent all the users and groups no explicitly defined in the directive from changing the system time.
0
 
LVL 5

Accepted Solution

by:
Manuel Flores earned 2000 total points
ID: 41748097
I have tried in my domain.  An administrator user called Rafa can change the system time.  Then I configured the directive mentioned above in the Default domain policy adding just my domain user, not Rafa of course.

In a given PC, using gpupdate /force doesn't worked!!... the user Rafa could change the system time :(

Despite of this, I logged off and on the user and this is the result trying to change the system time.  It is in spanish but I think it is clear;

Can't change system time
0
 
LVL 5

Expert Comment

by:Manuel Flores
ID: 41748098
You could use this same directive to explicitly allow your user/s to change the system time.
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Measuring Server's processing rate with a simple powershell command. The differences in processing rate also was recorded in different use-cases, when a server in free and busy states.
Transferring FSMO roles is done when an admin wants to split roles between certain Domain Controllers or the Domain Controller holding the Roles has been forcefully demoted using dcpromo / forceremoval
The viewer will learn how to successfully download and install the SARDU utility on Windows 7, without downloading adware.
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
Suggested Courses

972 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question