Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Date and Time - Allow or Prevent Users and Groups from Changing


Date and Time - Allow or Prevent Users and Groups from Changing

How to Allow or Prevent Specific Users and Groups from Changing the Date and Time in Windows
Published by Brink
24 Sep 2010
Published by

How to Allow or Prevent Specific Users and Groups from Changing the Date and Time in Windows

information   Information
This will show you how to allow or prevent specific users and groups from being able to change the computer date and time in Vista, Windows 7, and Windows 8.

You will need to be an administrator to open the Local Security Policy Editor.
Note   Note
Default Users and Groups Allowed to Change the Date and Time
NOTE: This user right determines which users and groups can change the time and date on the internal clock of the computer. Users that are assigned this user right can affect the appearance of event logs. If the system time is changed, events that are logged will reflect this new time, not the actual time that the events occurred.

On Local Computer, Workstation, and Servers: Administrators, LOCAL SERVICE

On Domain: Administrators, Server Operators, LOCAL SERVICE






OPTION ONE
Allow or Prevent Changing Date and Time using Local Security Policy
1. Open the Local Security Policy window, double click/tap on Local Policies and User Rights Assignment in the left pane to expand them open. (see screenshot below)
-step1.jpg
2. In the right pane of User Rights Assignment, double click/tap on Change the system time. (see screenshot above)

3. To Prevent Users and Groups from Changing the Date and Time
WARNING: Do not remove LOCAL SERVICE.
A) Select (highlight) listed user(s) and/or group(s) that you do not want to be allowed to change the computer date and time, then click/tap on the Remove button. (see screenshot below)
NOTE: You can press and hold the CTRL key and click/tap on listed users and groups to select more than one.
Name:  Remove-1.jpg
Views: 92633
Size:  43.7 KB


Tip   Tip
To Only Prevent Specific Administrators
  • You will also need to remove the Administrators group in addition to step 3A first, then only add each administrator user account name in step 4A that you want to be able to change the date and time.

B) Click/tap on Apply. (see screenshot below)
Name:  Remove-2.jpg
Views: 92084
Size:  40.5 KB
4. To Allow Users and Groups to Change the Date and Time
A) Click/tap on the Add User or Group button. (see screenshot below)
Name:  Add-1.jpg
Views: 92200
Size:  41.2 KB
B) To Change the Location to Search for "Object Types"

NOTE: This is only if you wanted to search for object types to allow from a location other than your local computer. If you only want to search from your computer, then skip this step and go to step 4C.
  • Click/tap on the Locations button. (see screenshot below step 4C)
  • Select a location, and click/tap on OK. (see screenshot below)
Name:  Location-1.jpg
Views: 92160
Size:  28.9 KB
C) Click/tap on the Object Types button. (see screenshot below)
Name:  Add-2.jpg
Views: 91738
Size:  37.0 KB
D) Check all boxes or the "object types" (ex: Users or Groups) that you want to find and select from in step 4G, and click/tap on OK. (see screenshot below)
Name:  Add-3.jpg
Views: 91594
Size:  32.9 KB
E) Click/tap on the Advanced button. (see screenshot below)
Name:  Add-4.jpg
Views: 91381
Size:  39.1 KB
F) Click/tap on the Find Now button. (see screenshot below)
Name:  Add-5.jpg
Views: 91682
Size:  58.2 KB
G) In the bottom pane under Search results, select one or more listed users or groups that you want to allow to be able to change the computer date and time, then click/tap on OK. (see screenshot below)
NOTE: You can press and hold the CTRL key and click/tap on listed users and groups to select more than one.
-add-6.jpg


Tip   Tip
To Only Allow Specific Administrators
  • You will need to remove the Administrators group in step 3A first, then add each administrator user account name that you want to be able to change the date and time.

H) Click/tap on OK. (see screenshot below)
Name:  Add-7.jpg
Views: 91212
Size:  39.9 KB
I) Click/tap on Apply. (see screenshot below)
Name:  Add-8.jpg
Views: 91095
Size:  42.9 KB
5. When finished, click/tap on OK. (see screenshots below steps 3B and 4I)

6. Close the Local Security Policy window. (see screenshot below step 1)



OPTION TWO
Allow or Prevent Changing Date and Time using an Elevated Command Prompt

NOTE: Be sure to write down changes you make to the user rights assignment so that you will know what you changed later. Please see the NOTE box at the top of the tutorial for the default user rights assignments.
1. If you have not already, click/tap on the Download button below to download the ntrights.exe file originally from within the Windows Server 2003 Resource Kit Tools.
download

A) Save the ntrights.exe file to your desktop.

B) Right click or press and hold on the ntrights.exe file, click/tap on Properties, General tab, and click/tap on the Unblock button if available. (see screenshot below)
NOTE: If you do not have a Unblock button under the General tab, then the file is already unblocked and you can continue on to step 1C.
Name:  Unblock.jpg
Views: 91085
Size:  71.2 KB
C) Right click or press and hold on the ntrights.exe file and click/tap on Move.

D) Open Windows Explorer and navigate to and open the C:\Windows\System32 folder, then Paste the ntrights.exe file to move it here.

E) If prompted, click/tap on Continue and Yes to approve moving the ntrights.exe file into the System32 folder, then close the Windows Explorer window.
2. Open an elevated command prompt (Run as administrator).

3. Prevent Users or Groups to be able to Change the Date and Time
WARNING: Do not remove LOCAL SERVICE.
A) In the elevated command prompt type in the command below and press enter.
NOTE: Substitute User or Group in the command below with the actual user account name (ex: Users) or group name within quotes that you want to prevent.
ntrights -U "User or Group" -R SeSystemtimePrivilege


Tip   Tip
To Only Prevent Specific Administrators
  • You will also need to remove the Administrators group in addition to step 3A first, then only add each administrator user account name in step 4A that you want to be able to change the date and time.

4. Allow Users or Groups to be able to Change the Date and Time
A) In the elevated command prompt type in the command below and press enter.
NOTE: Substitute User or Group in the command below with the actual user account name (ex: Users) or group name within quotes that you want to allow.
ntrights -U "User or Group" +R SeSystemtimePrivilege


Tip   Tip
To Only Allow Specific Administrators
  • You will need to remove the Administrators group in step 3A first, then add each administrator user account name that you want to be able to change the date and time.

5. When finished, close the elevated command prompt.
That's it,
Shawn


11 Apr 2012   #1
jhonalone

Vista HomePremium 32
 
 
error ntrights.exe

An error is reported by Vista home Premium.

If user have Administrator rights: ***Error*** OpenPolicy -1073741790

If user do not have Administrator rights: ***Error*** OpenPolicy -1073741790

There is a reason for this errror?

Thanks.


My System SpecsSystem Spec
11 Apr 2012   #2
Brink

64-bit Windows 10 Pro
 
 

Hello jhonalone, and welcome to Seven Forums.

That error just means that you did not open a "elevated" (run as administrator) command prompt. You can click on the link in step 2 of OPTION TWO for more details on how to open one.
My System SpecsSystem Spec
24 Apr 2013   #3
Brink

64-bit Windows 10 Pro
 
 

Hello FrozenPixel, and welcome to Seven Forums.

Any user or group that is not listed is already restricted, so no need to do anything if that's what you wanted.

Only listed users and groups are allowed to change the date and time. You'll just need to add any user or group that you want to allow to change the date and time.

Hope this helps,
Shawn
My System SpecsSystem Spec
.

07 Apr 2016   #4
nesszel

windos ultimate x64
 
 
HELP!

***ERROR*** AddUserRightToAccount -1073741728

how to solve this?
My System SpecsSystem Spec
07 Apr 2016   #5
Brink

64-bit Windows 10 Pro
 
 

Hello nesszel, and welcome to Seven Forums.

Please provide more details.
My System SpecsSystem Spec
1 Week Ago   #6
paradox42x

Windows 7 and Windows 10
 
 

I have granted everyone full access to change the system time in group policy. I verified the policy is being applied to the PC. I granted all users access to the HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\TimeZoneInformation key.

The user is not a local administrator but it still prompts them for admin credentials when try to change the date/time. They are able to change the timezone.

This is on a Windows 64 bit machine
My System SpecsSystem Spec
1 Week Ago   #7
Brink

64-bit Windows 10 Pro
 
 

Hello paradox42x, and welcome to Seven Forums.

As a test, set the policy for the "Users" group instead to see if it may work afterwards.
My System SpecsSystem Spec
1 Week Ago   #8
paradox42x

Windows 7 and Windows 10
 
 

Thank you for the quick response. the Users group did not work. I also tried Everyone.

still prompts for the admin username/password.

It does not do it when I try to change the time zone
My System SpecsSystem Spec
1 Week Ago   #9
Brink

64-bit Windows 10 Pro
 
 

As another test, how does it work if you specify the standard user account's name instead?
My System SpecsSystem Spec
Comment

 Date and Time - Allow or Prevent Users and Groups from Changing




Tutorial Tools




Similar help and support threads
Windows 7 Tutorial Category
Take Ownership - Allow or Prevent Users and Groups To
How to Allow or Prevent Users and Groups to be able to Take Ownership This will show you how to allow or prevent specific users and groups from being able to Take Ownership of items such as a file, folder, registry key, drive, or other objects in Vista, Windows 7, and Windows 8. You will...
Tutorials
Shut Down Computer - Allow or Prevent Users and Groups
How to Allow or Prevent Users and Groups to Hibernate, Restart, Shut Down, and Sleep the PC This will show you how to allow or prevent specific users and groups from being able to Shut Down, Restart, Sleep, and Hibernate the computer in Vista, Windows 7, and Windows 8. You will need to...
Tutorials
How to prevent users from changing my wallpaper?
I would like to specify a set of wallpapers to rotate,(a feature windows 7 has by default) and then make it impossible for any user, administrator or otherwise, to change that set. I know there has to be a way to do that, because there are multiple tutorials on how to lock just one wallpaper, I...
Customization
Date and Time keeps changing
So anytime I set my date and time to the correct settings either manually, in the bois, or allowing to sync with internet time option, the date and time seem to adjust forward randomly but seems to be often 2-3 weeks. Not sure when it changes since I never catch real time but I've changed my time...
General Discussion
Time Zone - Allow or Prevent Users and Groups from Changing
How to Allow or Prevent Specific Users and Groups from Changing the Time Zone in Windows This will show you how to allow or prevent specific users and groups from being able to change the computer time zone in Vista, Windows 7, and Windows 8. You will need to be logged in as an administrator...
Tutorials
Is there a way to disallow changing system time/date?
A bunch of guys in the office change the date/time and conveniently claim they finished their work on time. Is there a way to disallow changing of time? Thanks guys
General Discussion


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 11:12.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App