Need to Prevent Users from changing PC Clock

[GellyBelly]

I have a time sensitive application that uses the PC clock to record time. It is important that PC users are not allowed to change the PC time. Does anyone know of a W98 or XP method to prevent technical users from changing clock time? Or perhaps some utility that will do the same

 

[Accessdabbler]

You'd likely need a program to protect the clock in Win98 but in WinXP you may be able to alter a security policy (I use Win2K, not XP but the two OSs are similar).

Go to the Administrative Tools and open the Security Policy > User Rights Assignment. Scroll down the list to find "Change the System Time". You can change the ability of users to change the time here.

 

[thatrenowned]

For Windows 98 : Go to c:\windows\system and find the file called timedate.cpl.

Move this file somewhere where you have access to but your users don't.

This file is the control panel applet (CPL) which allows you to change the date. If it is moved from the above location or its extension changed, it won't appear in Control Panel. Also, if you double click the time in the task bar, the app won't launch.

The reason I suggested moving it instead of renaming it is because this way, you can still use it to change the date.

 

[ponerse]

Also, please remember that even if you somehow stop the clock from being adjusted in windows, someone can always go into Dos and change it. What about a program that constantly updates the time from the internet? There are many of those out there. That way, even if the time was changes, it would be changed back to the correct time right away.

 

[WheeDoggy]

I like that renowned's suggestion.

Typically, you would have the DOS command line disabled for users anyway.

 

[thatrenowned]

I've just checked on an XP Home system, and the same file is located at c:\windows\system32.

However, I'm sure XP has a much better way of setting something like this up...don't know how though.

Also, the XP version allows you to synchronise the time with the time.windows.com server.

 

[torturedmind]

booting their pc's to DOS mode (and changing the system date/time) won't stop your users from doing so. but renaming the file TIMEDATE.CPL to TIMEDATE.XXX (or any 3-char extension) will do under GUI mode.

let us know if this helped.

torturedmind

 

[dakota81]

Someone who hasn't had any experience with computers prior to Windows 95 most likely doesn't even know a command exists at the DOS prompt to change the time - so there's a chance you might not even have to look into this problem.

If you're real serious about blocking that - I believe in the policy editor you can remove the run button from the start menu and then just remove any links that open an MS-DOS prompt. I wouldn't advise this, but if you'd be willing to disallow access to the time window, you maybe want to. It would just make another roadblock in getting to where you can change the time.

 

[WheeDoggy]

Being that this is the Win 98 forum, let's focus on that.
(However XP solution may be similar)

Win 98 solution in case user is not ignorant of DOS and Windows:

See link - Disable restart in MS-DOS mode:

http://www.security-tips.com/restrict-restart-in-msdos-mode.htm

Disable DOS box: WinReg
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\WinOldApp]
Disabled = 1 (DWORD)
Do same for corresponding key in HKLM also.

And as thatrenowned stated, "Move timedate.cpl" - May want to even delete BUT keep a copy on floppy.

This assuming the other admin restrictions are in place - (ex. access to regedit)

PS Win98 Poledit is not excessively useful....

Let me know if I missed anything.