19/6/2014 GPO for restricting Time and Date!

http://social.technet.microsoft.com/Forums/windowsserver/en-US/f3762883-fb5f-47f6-baec-275e7e0e370b/gpo-for-restricting-time-and-date?forum=winserv 1/5
Answered by:
Top related threads
Apply Restricted Groups GPO one time
only
Folder access restriction - based on
date/time
Can the GPO deployment date and time be
scheduled in AGPM?
Restrict to access Outlook Exchange Email
Thru GPO time based
Restrict GPO
Ask a question
Quick access
Search related threads
Search forum questions
Search Windows Server with Bing
Home Windows Server 2012 Windows Server 2008 R2 Windows Server 2003 Library Forums
20 7 3
Awinish's threads
View Profile
60,955 Points
I work as an Solution Architect, highly
motivating individual & believes
knowledge is not someone's propriety, but
its a torch which has to be passed on to
nurture budding talents. This is the my
reason to be here.
Awinish
MCC, Partner, MVP
awinish.wordpress.com/
Windows Server >
GPO for restricting Time and Date!
Question
0
Sign in
to vote
Reply | Quote |
Thursday, December 08, 2011 7:49 AM
(Partner) 115 Points
Hello,
I know from GPMC > Computer Configuration\ Windows Settings\
Security Settings\ Local Policy\ User Rights Assignment > I can restrict users from changing
a) Change the system time
b) Change the Time Zone
I am looking for a similar GPO thread to restrict users (a specific OU) from changing the 'Date' but I
am not finding it easy.
At the end I needs users in a specific OU (they are local admins to their computers.) to not change
date and time at all!
Tips are thanked :)
Moved by Yan Li_ Microsoft contingent staff, Moderator Friday, December 09, 2011 7:44 AM
(From:Directory Services)
Answers
1
Sign in
to vote
Reply | Quote |
Thursday, December 08, 2011 9:23 AM
(MCC, Partner, MVP) 60,955 Points
By default, domain users can't change the system time/date until they are member of local admin
group. If, user is member of local admin group they can change the time but again when it will sync
with DC it will be reverted back.
If you configure below settings, apply GPO on OU where computer resides, even local admin is
denied changing the time.
computer Configuration\ Windows Settings\ Security Settings\ Local Policy\ User Rights
Assignment > change the system time
http://social.technet.microsoft.com/Forums/en/winserverGP/thread/f297ace9-5bb6-4e8f-b994-
cba9c176d579

Regards
Awinish Vishwakarma
MY BLOG: awinish.wordpress.com
This posting is provided AS-IS with no warranties/guarantees and confers no rights.
Marked as answer by Insaf Muhammed Friday, December 09, 2011 1:53 PM
Group Policy
Insaf Muhammed
Awinish
Sign in United States (English)