Lock Down Time Clock Permissions & Win2K Terminal Server 2

[dydavid]

Anyone have some ideas? Still searching for this help.

Dave

--------

Previous post had no feedback:

Home > Forums > MIS/IT > Operating Systems - Hardware Independent > Microsoft: Windows 2000 Server Forum

dydavid (MIS) Jun 18, 2004
Lock Down Time Clock Permissions & Win2K Terminal Server

1. We have remote users with Win XP wksta.
2. The access Win2K Terminal Server.
3. The users need to use a Time Clock sw. to 'punch in' & 'punch out'.

4. In testing a remote login user - "user1" for example, I can access the Win2K Terminal Server & change its
clock time & date. This is not good.

5. How can I lock this down, so only the admin user has access to the clock?

6. I was given this link as a starting point:

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/gp/529.asp

Very much obliged, Dave Y

 

[bcastner]

http://support.microsoft.com/defaul...port/kb/articles/q300/0/22.asp&NoWebContent=1

If you load the XP .ADM files, there is a GPO for XP clients (as authenticated users) to deny there ability to set date or time.

If the filestore is NTFS, set permissions on TimeDate.cpl, so that only Administrators have any NTFS permissions.

 

[linney]

Have a look at Group Policy.

Change the system time, Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment

Description
Determines which users and groups can change the time and date on the internal clock of the computer.


Using the Security settings tab and adjust the permissions for C/Windows/System32/timedate.cpl

Let the Administrators have full control of Timedate.cpl, other users Read, and Read/Execute only. If you don't want any Administrators to have control either adjust their settings too. Someone must be allowed to adjust time however.

Disable DateTime
thread779-711351