I recently took over administering a school’s network and the guy before me was horrible and left me with a nice pretty much undocumented mess. Anyways, I’ve been looking around for some information on how to deny/enable access to changing the system time on the domain/PDC itself. When I initially got on the the PDC it didn’t take me long to realize that I (logged in as Administrator [with domain/enterprise admin rights etc..]) was being denied access to change the system time… wtf right, especially since its an hour slow. So I went through some things in the default group policy object editor and only found some settings for the windows time service, really nothing about setting who has access to change the system time or to timedate.cpl. I can’t really find much information on this, or if it’s within group policy somewhere, or security policy — (which is screwed up from my predecessor already, great, right.) Well I was hoping you guys could help me out if you knew where this setting was located. Or had any suggestions. Thank You.
