DENY change time Registry key

[Grant]

Archived from groups: microsoft.public.windowsxp.work_remotely (More info?)

There must be a registry key to deny the local user to
change time without AD being installed. I would like to
deploy this key as a script across the network.

Why: Everytime users change time on local machine,
syncronisation errors occur with main servers. Due to
nature of business, that could cause enterprisewide
delays or failures possible Server freeses and crashes.

Any Ideas please <mailto:geashworth@hotmail.com> :-,

 

[Guest]

Archived from groups: microsoft.public.windowsxp.work_remotely (More info?)

You can change it uisng the ntrights tool from the 2003 server resource kit.
Download the resource kit
http://www.microsoft.com/downloads/details.aspx?FamilyID=9d467a69-57ff-4ae7-96ee-b18c4790cffd&displaylang=en

And use the following command

ntrights -r SeSystemtimePrivilege -u domainormachinename\accountorgroup

Regards
Mark Dormer


"Grant" <geashworth@hotmail.com> wrote in message
news:402201c47f76$44324470$a601280a@phx.gbl...
> There must be a registry key to deny the local user to
> change time without AD being installed. I would like to
> deploy this key as a script across the network.
>
> Why: Everytime users change time on local machine,
> syncronisation errors occur with main servers. Due to
> nature of business, that could cause enterprisewide
> delays or failures possible Server freeses and crashes.
>
> Any Ideas please <mailto:geashworth@hotmail.com> :-,
>

 

[Grant]

Archived from groups: microsoft.public.windowsxp.work_remotely (More info?)

Thanks Mark
The Windows 2003 Resource Kit tool NTRIGHTS, worked a
real treat!

I really must upgrade my certs to 2k3!
lol

Thanks Again!


>-----Original Message-----
>You can change it uisng the ntrights tool from the 2003
server resource kit.
>Download the resource kit
>http://www.microsoft.com/downloads/details.aspx?
FamilyID=9d467a69-57ff-4ae7-96ee-
b18c4790cffd&displaylang=en
>
>And use the following command
>
>ntrights -r SeSystemtimePrivilege -u
domainormachinename\accountorgroup
>
>Regards
>Mark Dormer
>
>
>"Grant" <geashworth@hotmail.com> wrote in message
>news:402201c47f76$44324470$a601280a@phx.gbl...
>> There must be a registry key to deny the local user to
>> change time without AD being installed. I would like to
>> deploy this key as a script across the network.
>>
>> Why: Everytime users change time on local machine,
>> syncronisation errors occur with main servers. Due to
>> nature of business, that could cause enterprisewide
>> delays or failures possible Server freeses and crashes.
>>
>> Any Ideas please <mailto:geashworth@hotmail.com> :-,
>>
>
>
>.
>