Re: Disable users from accessing the system date and time

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

I know to only take admin away.

--


Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA

This posting is provided "AS IS" with no warranties, and confers no rights.


"donny" <donny@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:07AA1978-9518-4F40-8F06-28565D5BBD22@xxxxxxxxxxxxxxxx
> Is there still a way to disable admin user access to their system and time
> tray even though they are an administrator? How can I do this through
group
> policy? Could you please give me some detaile instructions? Or, is the
only
> option to take away local admin rights from the user so that they are just
a
> normal user without many privileges the only way?
>
> "Paul Bergson" wrote:
>
> > If you provide someone with admin privileges then they can do anything
they
> > want including take any privilege taken from them. It is a huge
security
> > risk for all users to be admins on their machines, they can install
software
> > that may not be owned by the company, they can inadvertently install
virus'
> > and other malware.
> >
> > Take away the admin privilege and either publish via a gpo or sms. If
that
> > isn't possible give them admin privileges only when needed.
> >
> > --
> >
> >
> > Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA
> >
> > This posting is provided "AS IS" with no warranties, and confers no
rights.
> >
> >
> > "donny" <donny@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> > news:CB7971FA-5CA4-449B-BCA9-30390A791AA3@xxxxxxxxxxxxxxxx
> > > How do you disable an administrator of a PC to not be able to access
the
> > > system time and date tray on the right hand corner. I want to do this
> > through
> > > the default domain policy so that users who are part of the local
admin
> > group
> > > of their PC's can't change the system time and date. Note the user's
need
> > to
> > > be the local admin to install other software as well but i don't want
them
> > to
> > > access the system time and date using AD group policy. If you know,
that
> > > would be great.
> > >
> > > Thanks
> > >
> > > Donny
> >
> >
> >


.

Relevant Pages

  • Re: exe not working in non admin privilege winxp user account
    ... admin privilege).i am using vc 6.0 only and winxp. ... the file was opened shows a complete failure in thinking about programming. ... one way to deal with file opens: Assume that any file open will fail at any time for any ... ever do development under an admin account or with admin privileges enabled ...
    (microsoft.public.vc.mfc)
  • Re: exe not working in non admin privilege winxp user account
    ... admin privilege).i am using vc 6.0 only and winxp. ... Except admin privilege user account it is not possible ... one way to deal with file opens: Assume that any file open will fail at any time for any ... ever do development under an admin account or with admin privileges enabled ...
    (microsoft.public.vc.mfc)
  • Re: Executing app with admin privileges
    ... But the best solution is to use regmon/filemon to find the keys/files that require admin rights to execute and set security permissions on those keys/files/folders as needed to get the application to run correctly. ... Executing app with admin privileges ... local admin privileges in order for to run". ...
    (Security-Basics)
  • RE: Helpdesk as local admin
    ... I think the best practice would be to create a helpdesk group with stripped ... down admin privileges that are finely tuned to what they require and nothing ... Subject: Helpdesk as local admin ...
    (Security-Basics)
  • Re: Security best practice help!!! local admin addition!
    ... > They say it will decrease support costs ... Considering the fact that elevation of privileges (getting admin privileges) ... will succeed in cutting down the work a hacker has to do. ...
    (microsoft.public.windowsxp.security_admin)