Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Is there a way to limit the users ability to change time by more than an hour?

share|improve this question
1  
But what if the user changes the time one hour forward, then another hour forward, then another hour forward, then another hour forward, then... Well, you get my point... :-) –  Wim ten Brink Jun 3 '09 at 19:21
    
Good point. Never underestimate the lengths malicious people will go to to undermine something, or the lengths a "dumb" user will sometimes go to trying to solve a problem their way instead of asking for help. –  RobM Jun 3 '09 at 20:18
add comment

2 Answers

up vote 5 down vote accepted

There is no setting to control how "much" users can change the time, but Windows does have a setting in the domain security policy that can be set to disallow time changes. By default, only Administrators and Power Users can set the time on a domain workstation. This can be changed in the Default Domain Security Settings on the domain controller. Navigate to the Security Settings, Local Policies, then User Rights Assignment. There is a property called "Change the system time" which you can use to set the permissions on who can change the time on workstations, servers, and domain controllers.

share|improve this answer
add comment

I don't think so - I think you can either change the time or you can't, at least with the built in tools. If the machine is in a domain, be aware that fiddling with the time will cause people to have problems with authentication to domain resources.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.