Re: Group policy help

From: Kirk Schafer (infosec-capital_at_rainswept.com)
Date: 10/19/04

  • Next message: Dan Tesch: "Re: Netopia Routers" 
    Date: Tue, 19 Oct 2004 10:52:33 -0500
To: security-basics@securityfocus.com

    Peter,

    I've looked around; this change being ineffective seems to be a common
    problem. Perhaps the answer is that there are more changes made to the
    registry than just the "Disable..." parameter. Here are two registry
    dumps before and after setting "Central Daylight Time." If you're just
    turning off "DisableAutoDaylight", you may also have to update the other
    "Daylight..." keys, as well as the "ActiveTimeBias" key.

    Warning: I haven't tested this, because I'm pressed for time. If you
    choose to explore this, you should (compare your findings, and) export
    relevant registry keys before you make changes. This page should also
    help you:
    http://www.jsiinc.com/SUBA/tip0300/rh0398.htm

    Note, you may have to relogin / restart to make the changes take effect.

    Kirk

    Before:
    <--------snip---------->
    Windows Registry Editor Version 5.00

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\TimeZoneInformation]
    "Bias"=dword:00000168
    "StandardName"="Central Standard Time"
    "StandardBias"=dword:00000000
    "StandardStart"=hex:00,00,0a,00,05,00,02,00,00,00,00,00,00,00,00,00
    "DaylightName"="Central Daylight Time"
    "DaylightBias"=dword:ffffffc4
    "DaylightStart"=hex:00,00,04,00,01,00,02,00,00,00,00,00,00,00,00,00
    "ActiveTimeBias"=dword:0000012c
    <--------snip---------->

    After
    <--------snip---------->
    Windows Registry Editor Version 5.00

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\TimeZoneInformation]
    "Bias"=dword:00000168
    "StandardName"="Central Standard Time"
    "StandardBias"=dword:00000000
    "StandardStart"=hex:00,00,0a,00,05,00,02,00,00,00,00,00,00,00,00,00
    "DaylightName"="Central Standard Time"
    "DaylightBias"=dword:00000000
    "DaylightStart"=hex:00,00,0a,00,05,00,02,00,00,00,00,00,00,00,00,00
    "ActiveTimeBias"=dword:00000168
    "DisableAutoDaylightTimeSet"=dword:00000001
    <--------snip---------->

    Kirk

    Peter Rodger wrote:

    >Hi, all
    >
    >Due to security concern, we enforce that users
    >can not change system time. But somehow lots of
    >users do not check the daylight savings box. Is
    >there a way that we can check daylight savings box
    >through group policy or script?
    >Thanks,
    >
    >Peter
    >__________________________________________________
    >
    >
    >
    >
    >_______________________________
    >Do you Yahoo!?
    >Declare Yourself - Register online to vote today!
    >http://vote.yahoo.com
    >
    >
    >
    >
    > 

    -- 
___________________________________________________
Kirk Schafer
Infosec Capital - Your Information Security Asset
308 East Broadway Ave, PO Box 1851
Fairfield, IA 52556
641-919-1783 (mobile)
http://www.infosec-capital.com
  • Next message: Dan Tesch: "Re: Netopia Routers"

    Relevant Pages

    • Re: Daylight Savings Time Patch.
      ... I copied the registry entries from my WinXP registry - a suggestion ... until you switch back to standard time. ... if you want a star-gazing app) that shows info about ...
      (microsoft.public.pocketpc)
    • Re: DST Registry Changes
      ... at the registry. ... Reg keys to look at: ... Central Standard Time ... There's a value under this key called InstalledDate that will give you the ...
      (microsoft.public.exchange.admin)
    • Re: Zeitzoneninformation ermitteln
      ... Denn wir leben in Deutschland eigentlich nicht nach der UTC, sondern nach der UTC+1. ... sondern vielmehr im Schlüssel "Central European Standard Time". ... Allerdings kann dafür ja VB nichts, aber M$ mit seiner falschen Voreinstellung der Registry. ... Europe Standard Time] ...
      (microsoft.public.de.vb)