Home > Computers > Allow Users to Change Date, Time & Time Zone

Allow Users to Change Date, Time & Time Zone

I’m a big believer in following the "don’t put your primary account in the Administrators group” philosophy. Especially for “Users”. However, sometimes there are things that they just need to be able to do that require elevated privileges.

One of those things is changing the time zone. Users that travel need to be able to adjust the time zone on their laptop to reflect the time zone that they are in. Now in Vista, a regular user account can change the time zone. In XP the best you can do is give the user the ability to change the date, time & time zone. Sure the user changing the date or time could be bad especially on a domain because time being in sync is very important. But training (i.e. telling) the user to only change the time zone & not the time shouldn’t be that hard.

  1. Open the Local Security Settings MMC.
    Note:To open that MMC using the runas command you must first invoke the MMC console by running the following command:
    runas /user:domain\username “mmc %windir%\system32\secpol.msc”
  2. Expand Local Policies>User Rights Assignment.
  3. Double click Change system time & add the Users group.
  4. Open regedit & navigate to HKLM\System\CurrentControlSet\Control\TimeZoneInformation.
  5. Right click TimeZoneInformation & give the Users group the following permissions:
    Query Value
    Set Value
    Create Subkey
    Enumerate Subkey
    Notify
    Read Control
  6. Log off then log on.
Advertisements
Categories: Computers Tags:
  1. No comments yet.
  1. No trackbacks yet.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: