Solved

Change Time

Posted on 2016-08-08
5
61 Views
Last Modified: 2016-09-04
Can a local admin change the time on a domain pc?
0
Comment
Question by:daise703
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
5 Comments
 
LVL 5

Expert Comment

by:Manuel Flores
ID: 41748084
Depends on your domain Global Policy configuration.  Here is some explanation on how to push out local administrators:

https://community.spiceworks.com/how_to/907-gpo-to-push-out-local-administrators-across-a-domain
0
 

Author Comment

by:daise703
ID: 41748086
I gave a domain user local admin rights on his pc so he could change the time on his box. When he tries to change the time he relieves a message that states he does not have the permission to change the time.
0
 
LVL 5

Expert Comment

by:Manuel Flores
ID: 41748092
OK.  However, if you had configured this directive in your domain;

change the system time
Computer Configuration\Windows Settings\Security Settings\Account Policies\

Could prevent all the users and groups no explicitly defined in the directive from changing the system time.
0
 
LVL 5

Accepted Solution

by:
Manuel Flores earned 500 total points
ID: 41748097
I have tried in my domain.  An administrator user called Rafa can change the system time.  Then I configured the directive mentioned above in the Default domain policy adding just my domain user, not Rafa of course.

In a given PC, using gpupdate /force doesn't worked!!... the user Rafa could change the system time :(

Despite of this, I logged off and on the user and this is the result trying to change the system time.  It is in spanish but I think it is clear;

Can't change system time
0
 
LVL 5

Expert Comment

by:Manuel Flores
ID: 41748098
You could use this same directive to explicitly allow your user/s to change the system time.
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article outlines the process to identify and resolve account lockout in an Active Directory environment.
In-place Upgrading Dirsync to Azure AD Connect
This Micro Tutorial will go in depth within Systems and Security in Windows 7 and will go into detail regarding Action Center, Windows Firewall, System, etc. This will be demonstrated using Windows 7 operating system.
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…

751 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question