Monday, June 28, 2010

Allow standard user to change the time

If you follow best-practice and setup your users as standard users, you may have run into this is before. Standard users aren't allowed to change the time on the computer they are using. However, you can fix this using group policy, or by changing the local policy on the computer. Which method you want to use is up to you, but it's as simple as setting one policy.

1. Go into the policy you want to add this functionality to and navigate to Computer Configuration->Policies->Windows Settings->Security Settings->Local Policies->User Rights Assignment

2. Find the "Change the System Time" entry and double-click on it

3. Check the box labeled "Enable this policy setting", then click on "Add User or Group..."

4. Click on the Browse button

5. Enter Administrators and click on "Check Name". This will validate the name and make sure the system is able to find it

6. Administrators should now be underlined, which means everything is correct and the group has been validated. Now you can click OK

7. Click OK again to get back to the screen in step #3. Now repeat steps #4-6 for the group named "Users", and also for "LOCAL SERVICE"

8. That's it. Close your policy editor and now any standard users using the computers affected by the policy should be allowed to set the time on those systems.

Thanks go to this post for pointing me in this direction. I'm still looking for a way to allow users to change the time zone too, but from what I've been finding it's not possible and you have to script it through AD instead.

No comments: