timedate.cpl

[muosman]

I was told my someone the if you change

User Key: [HKEY_CURRENT_USER\Control Panel\don't load]
Add key timedate.cpl
Data Type: REG_SZ (String Value)
Value Data: No

This would stop uers from changing the clock. I have done this but I can still edit the clock can anyone help? All I want to do is stop users editing time . It is on an NT 4 Domian and all the user are power uers and changing them is not a option.

 

[AirCon]

muosman,

Change the filename "timedate.cpl" to "timedate.cp_" (whatever) or just delete the file (backup first!).

Regards

-- AirCon --

 

[bcastner]

That registry entry controls whether the ability in Control Panel to change the time/date is present or not, it does not effect a click on the taskbar clock.

Combine that with:

i. Rename timedate.cpl timedate_no.cpl
This will stop the click on the taskbar clock; or,

ii. If the filestore is NTFS, deny permissions to everyone but the Administrator on timedate.cpl

 

[muosman]

ok now I'm getting some where. I have set the permissions to domain and local admin only and now no one can mess about with the time nice one thanks. The only thing is I would also like to stop user using cmd.exe to set the time, but still want to run net time logon scripts. Is there any way around this? any help = nice.com

 

[bcastner]

They cannot use the run command on timedate.cpl if the NTFS permissions were set to deny access to the users.

The only alternative would be the Net command, with the time subcommand and the set parameter.

At that point the choices for setting the time become seriously constrained, as they need to indicate an external source and cannot type in time values.

You could:

a. Click Start, Run, type "regedit" and press Enter.
b. Locate to the registry key:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\TimeZoneInformation
c. Right click "TimeZoneInformation" and click Permission.
d. Click the Advanced button.
e. Click the Effective Permissions tab.
f. Make sure the necessary permissions are all disabled.

These prevents modifying the time/date values.