Re: Time
- From: "Phil Angus" <forumuser@xxxxxxxxxxxx>
- Date: Fri, 10 Apr 2009 17:48:40 +0100
Hi Meinolf,
Well, it seems to work. My test laptop has a uuser called philtest who has
local admin rights on the machine. I have set up the policy so that only
Domain Admins have the right to change the time, my laptop is in the OU
governed by the poilcy and philtest cannot change the time.
Cheers,
Phil
"Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
news:ff16fb661f70b8cb87f4e892e04b@xxxxxxxxxxxxxxxxxxxxxxx
Hello Phil,
Users with local admin rights you can not stop or block that easy.
Best regards
Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and
confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
Yes, thank you both very much, I was being a div! The machine policy
was correct and the machine (a test machine) was in the correct OU.
However, the test user I was trying this out with (philtest) had local
admin rights on the machine!
I have applied this policy now throughout, and the only users with the
rights to change the system time is set to domain admins (all
workstations are talking their time from the DC as standard). I have
not applied this particular policy to my servers though, or the domain
controllers OU.
Thanks for your help.
All the best,
Phil
"Marcin" <marcin@xxxxxxxxxxxxxxxx> wrote in message
news:OY%23nucRuJHA.2596@xxxxxxxxxxxxxxxxxxxxxxx
Phil,
As far as I understand your post, you are looking for a way to deny
(rather than grant) ability to change system time - correct? Are your
users local Administrators? If so, you should consider removing them
from
this group (you can use Restricted Groups GP setting to accomplish
this).
This would resolve your problem...
hth
Marcin
"Phil Angus" <novell@xxxxxxxxxxxxx> wrote in message
news:eYKU54QuJHA.4980@xxxxxxxxxxxxxxxxxxxxxxx
I have tried this Meinolf, and it doesn't seem to work!
Can you think of anything that could be overriding this feature? I
am not using block policy inheritance on any policy objects. Anyway,
the way I understand it is if items are left unconfigured in other
policies, then it would not affect the setting in this one.
Best Regards,
Phil
"Phil Angus" <novell@xxxxxxxxxxxxx> wrote in message
news:uHNcLQOuJHA.3816@xxxxxxxxxxxxxxxxxxxxxxx
Thanks very much Meinolf , I will give that a try.
Best Regards,
Phil
"Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
news:ff16fb661f3fe8cb866dbc1e4d82@xxxxxxxxxxxxxxxxxxxxxxx
Hello Phil,
Configure a GPO linked to the OU where the computers are located:
Computer configuration, windows settings, security settings, local
policies, user rights assignment, in the right pane use "Change
the systme time", here add the accounts/security groups that are
allowed to change it.
Best regards
Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties,
and
confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
I have a feeling this is a daft one but, how can I restrict
people from changing their XP computer's time via GP?
I have tried hiding the applet from control panel, but then all
they need to do is double click the time display in the task bar.
Ideally, I would like to fix their clocks to adjust using
daylight saving and restrict them from changing it and their
clocks are synchronised with the domain controller. I have found
one or two users (and there could be more) recently who didn't
have the daylight saving option ticked in Date and Time settings.
Thanks.
.
- Prev by Date: Re: Search Feature
- Next by Date: Re: Search Feature
- Previous by thread: Re: Time
- Next by thread: Re: Time
- Index(es):
Relevant Pages
|
