Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

Change Time

Posted on 2016-08-08
5
Medium Priority
?
73 Views
Last Modified: 2016-09-04
Can a local admin change the time on a domain pc?
0
Comment
Question by:daise703
  • 4
5 Comments
 
LVL 5

Expert Comment

by:Manuel Flores
ID: 41748084
Depends on your domain Global Policy configuration.  Here is some explanation on how to push out local administrators:

https://community.spiceworks.com/how_to/907-gpo-to-push-out-local-administrators-across-a-domain
0
 

Author Comment

by:daise703
ID: 41748086
I gave a domain user local admin rights on his pc so he could change the time on his box. When he tries to change the time he relieves a message that states he does not have the permission to change the time.
0
 
LVL 5

Expert Comment

by:Manuel Flores
ID: 41748092
OK.  However, if you had configured this directive in your domain;

change the system time
Computer Configuration\Windows Settings\Security Settings\Account Policies\

Could prevent all the users and groups no explicitly defined in the directive from changing the system time.
0
 
LVL 5

Accepted Solution

by:
Manuel Flores earned 2000 total points
ID: 41748097
I have tried in my domain.  An administrator user called Rafa can change the system time.  Then I configured the directive mentioned above in the Default domain policy adding just my domain user, not Rafa of course.

In a given PC, using gpupdate /force doesn't worked!!... the user Rafa could change the system time :(

Despite of this, I logged off and on the user and this is the result trying to change the system time.  It is in spanish but I think it is clear;

Can't change system time
0
 
LVL 5

Expert Comment

by:Manuel Flores
ID: 41748098
You could use this same directive to explicitly allow your user/s to change the system time.
0

Featured Post

[Webinar] Database Backup and Recovery

Does your company store data on premises, off site, in the cloud, or a combination of these? If you answered “yes”, you need a data backup recovery plan that fits each and every platform. Watch now as as Percona teaches us how to build agile data backup recovery plan.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In the absence of a fully-fledged GPO Management product like AGPM, the script in this article will provide you with a simple way to watch the domain (or a select OU) for GPOs changes and automatically take backups when policies are added, removed o…
Active Directory can easily get cluttered with unused service, user and computer accounts. In this article, I will show you the way I like to implement ADCleanup..
This Micro Tutorial will give you a introduction in two parts how to utilize Windows Live Movie Maker to its maximum editing capability. This will be demonstrated using Windows Live Movie Maker on Windows 7 operating system.
This video shows how to use Hyena, from SystemTools Software, to update 100 user accounts from an external text file. View in 1080p for best video quality.
Suggested Courses

571 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question