We have around 350 Windows XP PC and a Windows 2008 R2 Server. The problem is that some users are changing the date/time from BIOS and the next user who would try to log-in on that PC would get the date/time server difference error.
We tried to protect the Bios with a password but if we set an Administrator password they can't just skip that by pressing Intro and would enter in User mode (which is allowed to change date/time). If we set an User password, the same will be asked every time the PC is turned on (useless for us cause all the devices are turned off at 1 am).
I'm looking for a GPO to force a date/time update BEFORE the user log-in.