Change Time

Can a local admin change the time on a domain pc?
Dawin DaiseSr. Windows Systems AdministratorAsked:
Who is Participating?
 
Manuel FloresCommented:
I have tried in my domain.  An administrator user called Rafa can change the system time.  Then I configured the directive mentioned above in the Default domain policy adding just my domain user, not Rafa of course.

In a given PC, using gpupdate /force doesn't worked!!... the user Rafa could change the system time :(

Despite of this, I logged off and on the user and this is the result trying to change the system time.  It is in spanish but I think it is clear;

Can't change system time
0
 
Manuel FloresCommented:
Depends on your domain Global Policy configuration.  Here is some explanation on how to push out local administrators:

https://community.spiceworks.com/how_to/907-gpo-to-push-out-local-administrators-across-a-domain
0
 
Dawin DaiseSr. Windows Systems AdministratorAuthor Commented:
I gave a domain user local admin rights on his pc so he could change the time on his box. When he tries to change the time he relieves a message that states he does not have the permission to change the time.
0
 
Manuel FloresCommented:
OK.  However, if you had configured this directive in your domain;

change the system time
Computer Configuration\Windows Settings\Security Settings\Account Policies\

Could prevent all the users and groups no explicitly defined in the directive from changing the system time.
0
 
Manuel FloresCommented:
You could use this same directive to explicitly allow your user/s to change the system time.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.