Allow Users to Change Date, Time & Time Zone
I’m a big believer in following the "don’t put your primary account in the Administrators group” philosophy. Especially for “Users”. However, sometimes there are things that they just need to be able to do that require elevated privileges.
One of those things is changing the time zone. Users that travel need to be able to adjust the time zone on their laptop to reflect the time zone that they are in. Now in Vista, a regular user account can change the time zone. In XP the best you can do is give the user the ability to change the date, time & time zone. Sure the user changing the date or time could be bad especially on a domain because time being in sync is very important. But training (i.e. telling) the user to only change the time zone & not the time shouldn’t be that hard.
- Open the Local Security Settings MMC.
Note:To open that MMC using the runas command you must first invoke the MMC console by running the following command:
runas /user:domain\username “mmc %windir%\system32\secpol.msc”
- Expand Local Policies>User Rights Assignment.
- Double click Change system time & add the Users group.
- Open regedit & navigate to HKLM\System\CurrentControlSet\Control\TimeZoneInformation.
- Right click TimeZoneInformation & give the Users group the following permissions:
- Log off then log on.