Re: Group Policy/Prevent users from changing time on workstations

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

You can control who can change the time in group policy. Computer ->
Windows -> Security -> User rights assignment -> Change the system time.

By default, only admins and power users can change the time. And Franz is
right that the workstation time will sync to the server automatically unless
you've changed defaults. And, if the time is more than a few minutes off
between the workstation and the server, the server will not allow the
workstation to log in.

My attitude would be that if I can't trust a user to keep his/her hands off
that type of setting, they don't need to have power user rights. It's
easier for me to use group policy to progressively take rights away from
people who abuse them than it is to be running around fixing stuff.

"Paul Rosenberg" <Paul Rosenberg@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:0487B110-4D71-4888-B7C2-C303C512B2F3@xxxxxxxxxxxxxxxx
Greetings,

Can anyone tell me if there is a way to use Group Policy to prevent users
from changing the system time on their computers? If so, how?

Thanks much,

Paul Rosenberg


.

Relevant Pages

  • Re: assigning users to the Power users group via Group Policy
    ... this group" then you do not see your workstation. ... if you right-click the Restricted Groups node and select "Add ... After selecting your workstation you can type in power users ... > the adminpak installed and I also have Group Policy Management tool ...
    (microsoft.public.win2000.group_policy)
  • Re: How to include a "Power Users" group to be include in a GPO
    ... Obviously power users is not a domain group which is why you do not see it ... create a domain global group and add users that ... which can also be done via a Group Policy startup script.. ... > to selected users to gain access to a server by a Terminal Service ...
    (microsoft.public.windows.server.security)
  • Re: disable net create command
    ... Then that user must be in the power users local group on that computer. ... Disabling the command ... logging on with a local account to try to bypass Group Policy. ... > administrator account via the ...
    (microsoft.public.win2000.security)
  • Re: How to include a "Power Users" group to be include in a GPO
    ... However if this Group Policy is going to be ... create a domain global group and add users that ... >> How can I to create a group that evolves the local Power Users groups from ... >> Juan Villegas Azuaje ...
    (microsoft.public.windows.server.security)
  • RE: Group Policy or Setting -- Prevent Install Software
    ... Hi Adam, firstly please accept there is no 100% guaranteed way to stop your ... rule in group policy software restriction policies. ... My users are Power Users to the desktops. ... They cannot install software but I find they can install toolbars and ...
    (microsoft.public.windows.server.active_directory)