Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations wOOdy-Soft on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
stop user from changing system date/time
- Thread starter OhioSteve
- Start date
See if you can use any of the suggestions here.
Disable DateTime
thread779-711351
How to hide the windows clock
thread779-752232 is a missing thread but it included these suggestions from "bcastner" which you can adjust to suite.
Quote..............
bcastner (IS/IT--Manageme) Nov 20, 2003
1.
(i). Use NTFS permissions on the timedate.cpl. You want to permit only the SYSYEM, local and domain administrators full access and deny all others access and other permissions.
(ii). I assume you have looked at the Group Policy setting in Administrative Templates for control over setting the time?
(iii). I assume when you mention the registry you are referring to these keys:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\TimeZoneInformation
. Right click "TimeZoneInformation" and click Permission.
. Click the Advanced button.
. Click the Effective Permissions tab.
. Make sure the necessary permissions are all disabled for non-administrators.
That should more than do the job. With XP clients you have a second approach as well:
2. Use the Win2k reskit utility "ntrights.exe" to remove permissions.
"The system privilege, SeSystemTimePrivilege, controls the ability to set the system time. Time zone information, however, is considered part of the system time. In Control Panel, you cannot adjust the date or the time unless you have been granted the system privilege, SeSystemTimePrivilege. The default policy grants SeSystemTimePrivilege to "power users" and "administrators."
You can remotely change the privilege for your computers with the command:
ntrights -r SeSystemtimePrivilege -u Users -m \\computername
End Quote.........
In case of old u/s links here is some more on NtRights.
Computer admin question
thread779-973627
NTRIGHTS.exe (Resource Kit, 2000/2003)
Disable DateTime
thread779-711351
How to hide the windows clock
thread779-752232 is a missing thread but it included these suggestions from "bcastner" which you can adjust to suite.
Quote..............
bcastner (IS/IT--Manageme) Nov 20, 2003
1.
(i). Use NTFS permissions on the timedate.cpl. You want to permit only the SYSYEM, local and domain administrators full access and deny all others access and other permissions.
(ii). I assume you have looked at the Group Policy setting in Administrative Templates for control over setting the time?
(iii). I assume when you mention the registry you are referring to these keys:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\TimeZoneInformation
. Right click "TimeZoneInformation" and click Permission.
. Click the Advanced button.
. Click the Effective Permissions tab.
. Make sure the necessary permissions are all disabled for non-administrators.
That should more than do the job. With XP clients you have a second approach as well:
2. Use the Win2k reskit utility "ntrights.exe" to remove permissions.
"The system privilege, SeSystemTimePrivilege, controls the ability to set the system time. Time zone information, however, is considered part of the system time. In Control Panel, you cannot adjust the date or the time unless you have been granted the system privilege, SeSystemTimePrivilege. The default policy grants SeSystemTimePrivilege to "power users" and "administrators."
You can remotely change the privilege for your computers with the command:
ntrights -r SeSystemtimePrivilege -u Users -m \\computername
End Quote.........
In case of old u/s links here is some more on NtRights.
Computer admin question
thread779-973627
NTRIGHTS.exe (Resource Kit, 2000/2003)
- Status
