Re: Disable users from accessing the system date and time

donny <donny@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
> How do you disable an administrator of a PC to not be able to access
> the system time and date tray on the right hand corner. I want to do
> this through the default domain policy so that users who are part of
> the local admin group of their PC's can't change the system time and
> date. Note the user's need to be the local admin to install other
> software as well but i don't want them to access the system time and
> date using AD group policy. If you know, that would be great.

If you could restrict a computer administrator from accessing the system
time you may have undesirable results. You can install software without the
domain account being a computer administrator. It is much safer to give the
user access to the local administrator account for temporary use or even to
use 'run as' to install software an run programs. I've found that once users
understand the repercussions of normal everyday use while logged on as an
administrator they are more understanding about using a normal user account
and less likely to infect their computer accidentally with a worm or virus.
Even my 14 year old son understands and doesn't want to log on as an
administrator, I just created a local account with local admin rights that
has the same password as his domain account. It has an added benefit of him
getting less spyware, which he really likes.



--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This Helps
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
https://secure.lsaol.com/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
===================================


.

Relevant Pages

  • RE: Windows XP Pro cracker?
    ... Local Admin (WinFingerPrint it to tell what it is if you don't know, ... previous posts on how to tell) Administrator account is the administrator ... account in use in the recovery console. ... not affect the recovery console administrator password. ...
    (Security-Basics)
  • Re: Domains and unrestricted access
    ... account you logon to the company domain with into the local admins group on ... If you have the local admin username and password ... and administrator in domain 2. ... in control>panel>users and passwords i can't find my account. ...
    (microsoft.public.win2000.general)
  • Re: Error " must be a member of the administrators security group"
    ... log for either at the time the install fails. ... login using a administrator account"... ... If you run it with a local admin account it installs fine but if you try ...
    (microsoft.public.windows.group_policy)
  • Re: starting, stopping, restarting services using WMI
    ... administrator the application should be ... use sc.exe sdset command to grant a particular permission to ASPNET account. ... This posting is provided "AS IS" with no warranties, and confers no rights. ... tried to give the IUSER and IWAM accounts local admin rights too. ...
    (microsoft.public.win32.programmer.wmi)
  • You do not have the proper privilege level to...
    ... You do not have the proper privilege level to change the ... System Time. ... I am logged into the ONLY account: Administrator ...
    (microsoft.public.win2000.security)
Loading