Friday, November 7, 2008

Allow Non admin user to change Time/Time Zone for Windows

By default only power user and administrator has Right to change windows time setting normal user get errer when changing the time setting. to allow Normal user to change windows time administrator need to give them permission to allow user to change system time by gpedit.msc , secpol.msc or windows resourece tool kit rktool.exe by command line
start> run>gpedit.msc>local computer police >computer configuration > windows setting >security setting>local police>User Right Assinmgnet >Change system time. Duble click on change system time and add user or group that you want to give permision.For command line you need to download rktool.exe from
http://www.microsoft.com/downloads/details.aspx?FamilyID=9D467A69-57FF-4AE7-96EE-B18C4790CFFD&displaylang=en
OR from
http://www.petri.co.il/download_windows_2003_reskit_tools.htm
after install rktool.exe go to start > All Programs> windows resource kit Tool > command shell. Here type ntrights +r SeSystemtimePrivilege -u "Users" (Note: It is case sensitive)
This will give privilege to change system time. But if you have domain then it is better to give non admin user to change time zone privilege because if user change time then domain is not allow him to login in to domain so it better give the user to change time zone setting. for so create new GPO and add following registry key in path computer Configuration >Windows Settings>Secrity settings>Registry. Right click registry and select add key>machin>system>curentcontrolset> control >TimezonInformation> Ok > Select Users and give full Control> Ok > Replace exitstence perminsions on all subkey> OK This will give permision to change Time Zone to the users.

No comments: