Windows

Aside from syncing system clocks to your server, set up system policies and disable access to it from there, the properties sheet for the taskbar allows you to remove the clock from displaying completly, however this does mean no time is displayed and the system calander would not be accessible through clicking on the clock.

Setup the program so that it accesses your severs clock.

Another place to watch for is the system BIOS. If you think any user knows how to change the time there you'll want to password protect the BIOS. I'd do it anyway.

As long as a (minimally educated, potentially malicious) user knows how to access the BIOS at bootstrap -- F1, ESC, etc. -- you have no defense. I recommend abandoning the strategy, post haste, rather than wasting additional time/resources. Instead, contract a specialist who can configure a secure time-management software system.

Happy hunting!

'zoid

On the Window CD in the apptools folder which is in the admin folder is a folder called poledit. copy it to your local hard drive and run the poledit.exe. This is a great little utility that you can use restrict access to the control panel and desktop plus much more. Also as mentioned previously password protect the bios setup.