Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is there a way to limit the users ability to change time by more than an hour?

share|improve this question
But what if the user changes the time one hour forward, then another hour forward, then another hour forward, then another hour forward, then... Well, you get my point... :-) – Wim ten Brink Jun 3 '09 at 19:21
Good point. Never underestimate the lengths malicious people will go to to undermine something, or the lengths a "dumb" user will sometimes go to trying to solve a problem their way instead of asking for help. – RobM Jun 3 '09 at 20:18
up vote 5 down vote accepted

There is no setting to control how "much" users can change the time, but Windows does have a setting in the domain security policy that can be set to disallow time changes. By default, only Administrators and Power Users can set the time on a domain workstation. This can be changed in the Default Domain Security Settings on the domain controller. Navigate to the Security Settings, Local Policies, then User Rights Assignment. There is a property called "Change the system time" which you can use to set the permissions on who can change the time on workstations, servers, and domain controllers.

share|improve this answer

I don't think so - I think you can either change the time or you can't, at least with the built in tools. If the machine is in a domain, be aware that fiddling with the time will cause people to have problems with authentication to domain resources.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.