Re: Time and date lock

From: Agent414 (Agent414_at_discussions.microsoft.com)
Date: 03/09/05 

Date: Wed, 9 Mar 2005 08:19:06 -0800

Thank you. I do not believe these domain users are local users of any type
(they are not listed under local users). Yet, they can change the time (even
though it will sync back with the server eventually). However, I am using
the workstations as employee time punch clocks, so I cannot have the users
changing the time even if it is very temporary. Any suggestions?

"Phillip Windell" wrote:

> They already can't. Regular users are not allowed to change the clock.
> They have to be local administrators on the machine to do it. Don't make
> them local administrators.
>
> It doesn't matter anyway,...the machines will re-sync back the the time on
> the DC at the next refresh point.
>
> --
>
> Phillip Windell [MCP, MVP, CCNA]
> www.wandtv.com
>
>
> "Agent414" <Agent414@discussions.microsoft.com> wrote in message
> news:48B44C63-ACB2-4070-8FF7-4FF7EF3692D3@microsoft.com...
> > I am running Windows 2003 Server with 15 client Windows XP workstations.
> It
> > is configured as one domain with 15 users as part of an Active Directory.
> > The users are not local users of the workstations, but log on to their XP
> > workstations as users within the domain.
> > What can I configure so that the users cannot change the time and/or date
> of
> > the Windows XP workstations?
> > Thanks.
>
>
>

Relevant Pages

  • Re: Problem after removed "domain users" from "local administrator"s g
    ... We finally decided to remove the "domain users" group from the "local administrators" group on the workstations and since doing that we have a strange problem happening. ... Some programs simply cannot be used without administrator privileges, ever, which is an excellent reason to switch to software written by competent people. ... The right answer, in hindsight, was to add Domain Users to the Local Users group. ...
    (microsoft.public.windows.server.sbs)
  • System Account
    ... those domain security groups are part of the local users ... group on the workstations. ... The System account has full control to ... install such garbage as the google search bar or n-case or ...
    (microsoft.public.win2000.file_system)
  • Re: How to get local account lockout status over network?
    ... > workstations, not in a AD domain by design. ... > controllers to see whether an account is locked out or not. ... You can access Local Users and Groups there. ...
    (microsoft.public.windowsxp.security_admin)
  • RE: How do I use group policy to remove unnecessary users ?
    ... remove unnecessary local users from workstations by GPO or scripting. ... "Vikram Thakur" wrote: ...
    (microsoft.public.windows.group_policy)
  • Re: restrict local users totally
    ... accounts that reside locally on the workstation. ... >be any local users, because it's a domain controller. ... >workstations connecting to it can have local or domain users. ...
    (Security-Basics)