Local Admin Rights -> but no right to change the System Time?

  • Thread starter Thread starter Reinhard Mader
  • Start date Start date
R

Reinhard Mader

Is this possible?

I addes in my domain a user to the Local Administrator Group; because there
is some software running that needs administrator rights. But it should not
be possible for the User to change the System Time.

In the Default Domain Policy i gave the Rights for Changing System Time only
Domain Admins. But the User(s) can still change the System time (because
they're in the Local Admin Group).

Is there a reason for my Problem?

Many Thanks for Help

Reinhard
 
Once they are a local admin of the machine they can do whatever they
want....
 
It is difficult to impossible to restict a local administrator who knows the
power of the acount. The setting you are configuring is a machine policy, so
be sure that the computer is in the scope of influence of the GPO and look
at effective settings in the Local Security Policy to see if the policy is
being propagated to be what you expect. --- Steve
 
Back
Top