Re: How to Lock PC Clock and Date in XP pro ?

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance



Dear All Thanks everyone for the prompt reply,

1. I have ever tried to ask software vendor to for non-adm access
but it seem that it will be problematic in certain issue if we do so
.... so I have sort of accepted the fact. I think they have experience
system bug when doing so...

2. I will try on the timedate.cpl file in the System32 folder.
Revert back asap.

3. If they rest is able to break through - unless they come across this
forum !
I will need to look for a software to require seperate password access
when anyone needs to change the system time and date.
Currently there is no password access into the adm account.

Thanks everyone !
Sylvester-k

"John John" wrote:

Being that they are Administrators they can undo whatever it is that you
do, so there is only so much that you can do and hope that they aren't
clever enough to figure out how to undo what it is that you did.

Change the Security Permissions on the timedate.cpl file in the System32
folder. Deny Read & Execute as well as Read permissions for the
Administrator group and they won't be able to launch the applet to
change the time or date. Of course it's only a matter of time before
they figure out what is going on. If you want to make it a bit more
difficult for them to change it you can remove all the users from the
permissions and give ownership to yourself only, then only you will be
able to change any of the permission. Only you that is... plus the
System account, if the others are clever enough they will soon figure
out how to use the System account to change the permissions.

John

sylvester_k wrote:

Hi all,

I have a standalone PC running under XP PRO - adminstrator account.
Pls advice how can I can lock the PC time and date so that
others (using the PC also in adm. mode) is not able change it easily.

I am not able to create additional restricted account as I am havin this
software application that works properly only in adminstrator mode which
other user needs to use them regularly.

I am also aware that I can set some form of user permissions/restrictions
with
Group Policy (Start>Run>gpedit.msc [enter]) - can I achieve the above
with this ?

If yes, as I am total new to gpedit, can anyone link me to some procedure
to set the above PC clock & date ?

Is there any freeware / software that can achieve this ? Kindly recommend.

Thanks in advance.

With Regards
Sylvester









.



Relevant Pages

  • Re: Incoming E-Mail - cant create contact in OU
    ... account out of local administrator to attempt to find any denied access. ... I then added full permissions to my user account on both of these keys, ... local admin rights to the server hosting incoming email. ... what permission I need to give the app pool locally to avoid this issue. ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: Incoming E-Mail - cant create contact in OU
    ... account out of local administrator to attempt to find any denied ... I then added full permissions to my user account on both of these keys, ... that's for every app pool you create for every new web app on the ... local admin rights to the server hosting incoming email. ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: Win2k - Account Operator not working properly
    ... You very likely have other ACL issues other than what was mentioned and I can point them out here for you for free or you can pay someone $200-500 an hour to come check it out. ... In order for that to result in inheritence protection it means the schema had to be modified. ... set the account in the GUI to inherit from its parents. ... Used the delegation wizard, on the top level OU, to assign the desired permissions. ...
    (microsoft.public.windows.server.active_directory)
  • Consider Windows XP File Security and Group Policies
    ... If you are running Windows XP and are using the NTFS file system, ... Account from being able to purge its history footprint files. ... Changing Folder permissions to Read-Execute instead of Full ... you globally apply Full Control for the Administrators group and the SYSTEM ...
    (microsoft.public.windowsxp.general)
  • Re: Incoming E-Mail - cant create contact in OU
    ... account out of local administrator to attempt to find any denied access. ... I then added full permissions to my user account on both of these keys, ... local admin rights to the server hosting incoming email. ... what permission I need to give the app pool locally to avoid this issue. ...
    (microsoft.public.sharepoint.windowsservices)