How to take away everyone’s Time Control

I know how to edit the registry to remove user’s ability to change the System Time on their PC’s…but to do this for all users at certain levels…is policy editor the best way? How can I protect myself from messing this up for all users? Any Microsoft Documentation on this? How is it done with Policy Editor for NT4.0? (Never needed to do it till now).