Prevent user changing time manually?

Hi,

I have a user who keeps changing the time on her Win7 workstation. The PC eventually resets the correct time automatically, but I would like to find a way to prevent her changing time manually. I've looked at various ways to prevent users from changing time (local security policy, GPO), but they all prevent not only the manual time-change but also the automatic reset of the time. What I seek is a way to prevent the manual time-change that still allows the automatic. I'm open to a third-party solution as well.

GaryK

Change the user instead!

Sorry couldn't resist

Hope you solve this.

GokAy said:

Change the user instead!

Sorry couldn't resist

Hope you solve this.

If wishes were horses then beggars would ride.

Thanks for the sympathy.

Hey after dinner, I searched for this and found Date and Time - Allow or Prevent Users and Groups from Changing

See if it helps you. (No dry sympathies) :)

Note: Reading a bit on that page, I don't see any regular user account or groups. Perhaps your user is a local admin on that machine?

GokAy said:

Hey after dinner, I searched for this and found Date and Time - Allow or Prevent Users and Groups from Changing

See if it helps you. (No dry sympathies) :)

Thanks. These alternatives prevent both manual and automatic reset. I want to prevent manual changes, but I want the system time to be correct and to autocorrect as necessary.

GaryK

RolandJS said:

What was the reply when you asked the user why is the time constantly being changed? Maybe the problem and solution is further upstream.

Known her for a long time. She's poorly organized. She likes to keep the clock five minutes fast. If I can find a local solution, that would be better than taking it to management. That option is open, but for later if I can't find a local solution.

GaryK

According to post #3 by Brink (he is the Admin with over 50k posts, I guess he knows what he is talking about) in the link I gave:
"Only listed users and groups are allowed to change the date and time. You'll just need to add any user or group that you want to allow to change the date and time."

So if that user is able to change date time, then there is a problem somewhere in your domain(?)/local computer. As an example, I have seen users being added to local administrators group so they could install programs before. So it may be possible in your case.

See there are 2 preconfigured allows in the Local Security Policy. Administrators (manual) and Local Service (I believe this is the automatic). Not an expert in this issue but that's what I understand. Your user shouldn't be able to change in the first place!

Wanted to add: I haven't worked in a corporate environment for a long time, you might need to check group policy instead.

GokAy said:

According to post #3 by Brink (he is the Admin with over 50k posts, I guess he knows what he is talking about) in the link I gave:
"Only listed users and groups are allowed to change the date and time. You'll just need to add any user or group that you want to allow to change the date and time."

So if that user is able to change date time, then there is a problem somewhere in your domain(?)/local computer. As an example, I have seen users being added to local administrators group so they could install programs before. So it may be possible in your case.

See there are 2 preconfigured allows in the Local Security Policy. Administrators (manual) and Local Service (I believe this is the automatic). Not an expert in this issue but that's what I understand. Your user shouldn't be able to change in the first place!

Wanted to add: I haven't worked in a corporate environment for a long time, you might need to check group policy instead.

You are correct in every respect. The user can change the time. I can prevent this, but this also prevents the automatic reset. A solution may not be available, but I seek a more-granular solution that allows the system to change the time but not the user. Group Policy has the same effect--time change either on or off.

Perhaps there's a per-user way to remove the "Change date and time settings..." option from the tray-clock dialog. That might mean editing a DLL. That in turn presumes locating the correct DLL.

Are you absolutely sure this user of yours has a regular user account? Perhaps a power user but then again only admins have the right to change time, so I don't know .

Are you in a domain environment? You never told anything about it. Provide with some details please, not for me, but for those more knowledgeable in managing a domain. (If you are in a domain)

I still think you are looking at the wrong direction trying to prevent something that's supposedly not happening in the first place.

----------------
Another idea would be finding a clock program that would run independent of the system date/time which she could adjust to her heart's desire. I did search a bit but all seems to sync with system. Maybe you will find such a program easier, as English is 2nd language to me.

I bet this would be extremely easy for someone with programming knowledge, perhaps you can find someone here in this forum.

Thanks for bearing with me