By default only power user and administrator has Right to change windows time setting normal user get errer when changing the time setting. to allow Normal user to change windows time administrator need to give them permission to allow user to change system time by gpedit.msc , secpol.msc or windows resourece tool kit rktool.exe by command line
start> run>gpedit.msc>local computer police >computer configuration > windows setting >security setting>local police>User Right Assinmgnet >Change system time. Duble click on change system time and add user or group that you want to give permision.For command line you need to download rktool.exe from
http://www.microsoft.com/downloads/details.aspx?FamilyID=9D467A69-57FF-4AE7-96EE-B18C4790CFFD&displaylang=en
OR from
http://www.petri.co.il/download_windows_2003_reskit_tools.htm
after install rktool.exe go to start > All Programs> windows resource kit Tool > command shell. Here type ntrights +r SeSystemtimePrivilege -u "Users" (Note: It is case sensitive)
This will give privilege to change system time. But if you have domain then it is better to give non admin user to change time zone privilege because if user change time then domain is not allow him to login in to domain so it better give the user to change time zone setting. for so create new GPO and add following registry key in path computer Configuration >Windows Settings>Secrity settings>Registry. Right click registry and select add key>machin>system>curentcontrolset> control >TimezonInformation> Ok > Select Users and give full Control> Ok > Replace exitstence perminsions on all subkey> OK This will give permision to change Time Zone to the users.
Following are the topic link you may interested :-
1) Windows Active Directory.
2) Creating Multiple Users in Active Directory using excel file and VbScirpt.
3) Search (find) user in Active directory with First and Last Name using VbScirpt.
4) Export all users in Excel file from Active Directory.
5) Update or Modify Users information in Active Directory from Excel file.
start> run>gpedit.msc>local computer police >computer configuration > windows setting >security setting>local police>User Right Assinmgnet >Change system time. Duble click on change system time and add user or group that you want to give permision.For command line you need to download rktool.exe from
http://www.microsoft.com/downloads/details.aspx?FamilyID=9D467A69-57FF-4AE7-96EE-B18C4790CFFD&displaylang=en
OR from
http://www.petri.co.il/download_windows_2003_reskit_tools.htm
after install rktool.exe go to start > All Programs> windows resource kit Tool > command shell. Here type ntrights +r SeSystemtimePrivilege -u "Users" (Note: It is case sensitive)
This will give privilege to change system time. But if you have domain then it is better to give non admin user to change time zone privilege because if user change time then domain is not allow him to login in to domain so it better give the user to change time zone setting. for so create new GPO and add following registry key in path computer Configuration >Windows Settings>Secrity settings>Registry. Right click registry and select add key>machin>system>curentcontrolset> control >TimezonInformation> Ok > Select Users and give full Control> Ok > Replace exitstence perminsions on all subkey> OK This will give permision to change Time Zone to the users.
Following are the topic link you may interested :-
1) Windows Active Directory.
2) Creating Multiple Users in Active Directory using excel file and VbScirpt.
3) Search (find) user in Active directory with First and Last Name using VbScirpt.
4) Export all users in Excel file from Active Directory.
5) Update or Modify Users information in Active Directory from Excel file.
Sandeep,
ReplyDeleteI need to lockdown the system time my first running gpedit.msc and then removing administrators from the group and then adding administrator and polling. Can I do this via a script?
Essentially I have to;
Run gpedit.msc
Computer COnfiguration
Windows Settings
Security Settings
Local Policies
User Rights Assignment
Double Click Change the system time
Select Administrators > Click Remove
Click Add User or Group
Type Administrator > Click Check Names
Type polling > Click Check Names
OK > Apply > OK
Logoff
I have to do this for a huge number of computers so is there a batch file I could run on each PC to do this?
Best Regards
Raj
which OS are you using Raj
DeleteWindows XP
ReplyDelete