If her computer is five minutes ahead of everyone else in that office, does that affect any server-level folder & files backup? Sharing of her documents, modified or not, with others? If so, you're going to have to gently explain the unintended consequences of the five-minute difference upon others, and, appeal to her sense of accomplishment that leaving the correct time is best for everyone, including her.
Sorry, I should have said. Win7 Ent/SP1. She's an admin, for corporate/political reasons, and that's the way that's going to stay. I can argue for the time-change restriction because it's a security issue, but the larger, Admin status is not going to change. Yes, it's a domain. I like the 3rd-party idea and am looking; perhaps an alarm program. I'm also going to look at the option of adding full System permissions to the LocSec policy.Are you absolutely sure this user of yours has a regular user account? Perhaps a power user but then again only admins have the right to change time, so I don't know.
Are you in a domain environment? You never told anything about it. Provide with some details please, not for me, but for those more knowledgeable in managing a domain. (If you are in a domain)
I still think you are looking at the wrong direction trying to prevent something that's supposedly not happening in the first place.
----------------
Another idea would be finding a clock program that would run independent of the system date/time which she could adjust to her heart's desire. I did search a bit but all seems to sync with system. Maybe you will find such a program easier, as English is 2nd language to me.
I bet this would be extremely easy for someone with programming knowledge, perhaps you can find someone here in this forum.
Thanks for bearing with me
No bearing with you going on. This is helping me think this through. I appreciate your devoting time to my problem.
Oh here we go, so she is an admin :)
Go to the link I gave earlier, and do try the option to "To Only Prevent Specific Administrators ".
Basically, you will remove the Administrators group and add all administrator accounts but her manually one by one!
Hopefully someone with domain experience will comment if the procedure is different in such a setting. For example, does the Local Security Policy get overridden by group policy or some other policy?
Do you know what account is used to change the time automatically ???
Maybe you need to add the SYSTEM account to allow time changes, when you add GPO restrictions ???
I don't know, just guessing here.
Well here's some thoughts.... I use third party software to adjust my system clock. You can find the download here:
TimeSync
The intersting thing is that you can run it with the /AUTO switch and set it to only adjust time if clock deviation is greater than a specified number of seconds. It also works it's way through a list of time servers until one connects when using the /AUTO switch.
Maybe it's possible to install this portable application in a hidden folder and run it silently and automatically at regular intervals? Probably it could be done using task scheduler.
Just a thought.
Last edited by Callender; 15 May 2015 at 14:40. Reason: remove second image
Well I can get it to run on a schedule and sync the clock every minute without the program launch window showing up. The problem I've got is that once time sync is complete I get this window.
So if I could figure out how to hide it?
In any case even if the system clock was adjusted to always show the correct time using any method - obviously the user will catch on! I mean who doesn't check the time on their mobile phone, wristwatch of office wall clock?
Quote
