up vote 2 down vote favorite
1
share [g+] share [fb]

I need to write a script that will remove all users under Local Computer Policy > Computer Configuration > Windows Settings > Security Settings > User Rights Assignment > Change the system time from the local group policy (gpedit.msc) on all Windows XP machines. These machines are not on the domain. I DO have a way to distribute and run the script automatically. Can someone point me in the right direction for creating a script like this?

link|improve this question
50% accept rate
feedback

1 Answer

up vote 1 down vote

Well, ignoring the fact that an administrator can just change it back.. ;)

The secedit tool should provide the functionality you need. Use /areas SECURITYPOLICY.

link|improve this answer
I know they can change it back, but they don't know how. I realize it's not the best idea to give users admin rights. Without going into detail, it's necessary in this instance. – user72128 Mar 9 '11 at 7:49
+1 for pointing out that administrators can change it back. – Ian Boyd Mar 12 '11 at 18:19
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.