Search Windows and Linux Networking

Saturday, November 8, 2008

Allow Non admin user to change Time/Time Zone for Windows

By default only power user and administrator has Right to change windows time setting normal user get errer when changing the time setting. to allow Normal user to change windows time administrator need to give them permission to allow user to change system time by gpedit.msc , secpol.msc or windows resourece tool kit rktool.exe by command line
start> run>gpedit.msc>local computer police >computer configuration > windows setting >security setting>local police>User Right Assinmgnet >Change system time. Duble click on change system time and add user or group that you want to give permision.For command line you need to download rktool.exe from
http://www.microsoft.com/downloads/details.aspx?FamilyID=9D467A69-57FF-4AE7-96EE-B18C4790CFFD&displaylang=en
OR from
http://www.petri.co.il/download_windows_2003_reskit_tools.htm
after install rktool.exe go to start > All Programs> windows resource kit Tool > command shell. Here type ntrights +r SeSystemtimePrivilege -u "Users" (Note: It is case sensitive)
This will give privilege to change system time. But if you have domain then it is better to give non admin user to change time zone privilege because if user change time then domain is not allow him to login in to domain so it better give the user to change time zone setting. for so create new GPO and add following registry key in path computer Configuration >Windows Settings>Secrity settings>Registry. Right click registry and select add key>machin>system>curentcontrolset> control >TimezonInformation> Ok > Select Users and give full Control> Ok > Replace exitstence perminsions on all subkey> OK This will give permision to change Time Zone to the users.


Following are the topic link you may interested :-

1) Windows Active Directory.
2) Creating Multiple Users in Active Directory using excel file and VbScirpt.
3) Search (find) user in Active directory with First and Last Name using VbScirpt.
4) Export all users in Excel file from Active Directory. 
5) Update or Modify Users information in Active Directory from Excel file.

3 comments:

  1. Sandeep,

    I need to lockdown the system time my first running gpedit.msc and then removing administrators from the group and then adding administrator and polling. Can I do this via a script?

    Essentially I have to;

    Run gpedit.msc
    Computer COnfiguration
    Windows Settings
    Security Settings
    Local Policies
    User Rights Assignment
    Double Click Change the system time
    Select Administrators > Click Remove
    Click Add User or Group
    Type Administrator > Click Check Names
    Type polling > Click Check Names
    OK > Apply > OK
    Logoff

    I have to do this for a huge number of computers so is there a batch file I could run on each PC to do this?

    Best Regards

    Raj

    ReplyDelete