Disable System Date in XP

Is there a way within the registry to disable a users access to the Date and Time Properties in Windows XP? Either that, or is there a program that can log in a text file that/when the date was changed on a local computer?

Thanks!

bbbco

 

Are you running XP home or Pro? You can use gpedit in pro to control the system clock.

 

Thanks for responding.

We have XP Pro. What is gpedit?

Thanks,

bbbco

 

gpedit.msc is the group policy editor. This gives you alot of administrative control over windows. You can set logon scripts, disable settings, etc. I've actually found a better solution for you, though. Please do the following:

1. Navigate to c:\windows\system32\
2. Right-click timedate.cpl
3. Select 'Properties'
4. Select the 'Security' tab

Here, you can set which users have access to date and time properties. Post back if you have any questions.

 

Thanks for the help!

Is there a script or a reg file that could be created to modify this?

bbbco

 

I don't know how its done, but I'm almost positive it can be. Are you looking to do it sir? I know of a few places I could refer you to.

 

Yes, we have a number of users at the company I am interning at that need to be able to have administrative access for the most part (to install software updates, etc), however, because of the job they do and the program they use, we need to dismantle their ability to change the date on the computer. Is there a script or a reg file we could create and push out to them in one fell swoop?

Thanks!

bbbco

 

Wow, you're opening a can of worms there, amigo! You would need a script that would enumerate all your users, and then set permissions on this file for each. Are you using directory services at all? I ask because my gf administers an NT domain, so on a network like that you couldn't even think of something like this. If you're using AD, you may be a little better off, but honestly, the time and research involved in this would make doing it manually a more time and cost effective solution.

 

Yes, we use Active Directory.

The computer users are located in various parts of the country, thus we cannot do this manually.

I figured we would push it out using AD anyways...I was just looking for a script to do it.

bbbco

 

Hmmm... does your network use NTP? If so, your client's times should syncrhonize with the DC automatically. Refer to this KB article for instructions on how to configure an authoritative time server in Windows 2K3. If you want to make sure that the clients are in sync, set a shorter poll interval.

 

Yeah, we have the users computers set so that it will sync the time and date when they connect to the network, however, we need a way to prevent the users from changing the date (otherwise they could change the date to misrepresent when they completed certain duties within the specific specialized program that was developed for their use) while they are not connected to the network.

That is why I was looking for a one-time reg file or a script we could push out to them.

Thanks for all your assistance!

bbbco

 

If your using Active Directory you should have to worry about adding a script. You need to modify the User Rights of the Domain Controller GPO. See this link: http://technet2.microsoft.com/Windo...2631-42b8-a0b2-0dd45cd7338c1033.mspx?mfr=true