Allow or Prevent Users and Groups to Change Time in Windows 10  

    Allow or Prevent Users and Groups to Change Time in Windows 10

    Allow or Prevent Users and Groups to Change Time in Windows 10

    How to Allow or Prevent Users and Groups to Change Time in Windows 10
    Published by Category: General Tips
    19 Oct 2020
    Designer Media Ltd

    How to Allow or Prevent Users and Groups to Change Time in Windows 10


    Your PC's system clock is used to record the time whenever you create or modify files on your PC.

    Time is a measure in which events can be ordered from the past through the present into the future, and also the measure of durations of events and the intervals between them.

    Each group in Windows has its own default rights and permissions. When a user is a member of a group, the user will be assigned the rights and permissions of the group.

    By default, only members of the Administrators group are able to change the system time in Windows 10.

    See also: Change the system time - security policy setting (Windows 10) | Microsoft Docs

    This tutorial will show you how to allow or prevent specific users and groups from being able to change the system time in Windows 10.

    You must be signed in as an administrator to allow or prevent users and groups from changing the system time.



    Contents

    • Option One: To Allow Users and Groups to Change Time in Local Security Policy
    • Option Two: To Prevent Users and Groups to Change Time in Local Security Policy
    • Option Three: To Allow or Prevent Users and Groups to Change Time in Command Prompt






    OPTION ONE

    To Allow Users and Groups to Change Time in Local Security Policy


    Local Security Policy is only available in the Windows 10 Pro, Enterprise, and Education editions.

    All editions can use Option Three below.


    1 Press the Win + R keys to open Run, type secpol.msc into Run, and click/tap on OK to open Local Security Policy.

    2 Expand open Local Policies in the left pane of Local Security Policy, click/tap on User Rights Assignment, and double click/tap on the Change the system time policy in the right pane. (see screenshot below)

    Allow or Prevent Users and Groups to Change Time in Windows 10-system_time_user_rights_assignment-1.jpg

    3 Click/tap on the Add User or Group button. (see screenshot below)

    Allow or Prevent Users and Groups to Change Time in Windows 10-system_time_user_rights_assignment-2.png

    4 Click/tap on the Object Types button. (see screenshot below)

    Allow or Prevent Users and Groups to Change Time in Windows 10-system_time_user_rights_assignment-3.png

    5 Check all the boxes for Object types, and click/tap on the OK. (see screenshot below)

    Allow or Prevent Users and Groups to Change Time in Windows 10-system_time_user_rights_assignment-4.png

    6 Click/tap on the Advanced button. (see screenshot below)

    Allow or Prevent Users and Groups to Change Time in Windows 10-system_time_user_rights_assignment-5.png

    7 Click/tap on the Find Now button, select the name of the user or group (ex: "Everyone") you want to add, and click/tap on OK. (see screenshot below)

    If you like, you can press and hold the Ctrl key to select more than one user and/or group.

    Allow or Prevent Users and Groups to Change Time in Windows 10-system_time_user_rights_assignment-6.jpg

    8 Click/tap on OK. (see screenshot below)

    Allow or Prevent Users and Groups to Change Time in Windows 10-system_time_user_rights_assignment-7.png

    9 Click/tap on OK. (see screenshot below)

    Allow or Prevent Users and Groups to Change Time in Windows 10-system_time_user_rights_assignment-9a.png

    10 When finished, you can close Local Users and Groups if you like.






    OPTION TWO

    To Prevent Users and Groups to Change Time in Local Security Policy


    Local Security Policy is only available in the Windows 10 Pro, Enterprise, and Education editions.

    All editions can use Option Three below.


    1 Press the Win + R keys to open Run, type secpol.msc into Run, and click/tap on OK to open Local Security Policy.

    2 Expand open Local Policies in the left pane of Local Security Policy, click/tap on User Rights Assignment, and double click/tap on the Change the system time policy in the right pane. (see screenshot below)

    Allow or Prevent Users and Groups to Change Time in Windows 10-system_time_user_rights_assignment-1.jpg

    3 Select the user or group (ex: "Everyone") you want to remove, and click/tap on the Remove button. (see screenshot below)

    If you like, you can press and hold the Ctrl key to select more than one user and/or group.


    Do not remove LOCAL SERVICE since this is used by Windows.

    Allow or Prevent Users and Groups to Change Time in Windows 10-system_time_user_rights_assignment-8.png

    4 Click/tap on OK. (see screenshot below)

    Allow or Prevent Users and Groups to Change Time in Windows 10-system_time_user_rights_assignment-9b.png

    5 When finished, you can close Local Users and Groups if you like.






    OPTION THREE

    To Allow or Prevent Users and Groups to Change Time in Command Prompt


    1 If you haven't already, you will need to do the following below before continuing on to step 2 below.

    A) Download the ntrights.exe file below from the Windows Server 2003 Resource Kit Tools.
    B) Save the ntrights.zip file to your desktop, and unblock it.

    C) Open the ntrights.zip file, copy or move the ntrights.exe file into your C:\Windows\System32 folder, and click/tap on Continue to approve.

    2 Open an elevated command prompt.

    3 Type the command you want below into the elevated command prompt, and press Enter. (see screenshots below)

    (Add user or group)
    ntrights +r SeSystemtimePrivilege -u "User or Group"

    OR

    (Remove user or group)
    ntrights -r SeSystemtimePrivilege -u "User or Group"

    Substitute User or Group in the command above with the actual name of the user or group (ex: "Everyone") you want to add or remove for this policy.

    For example: ntrights +r SeSystemtimePrivilege -u "Everyone"


    Do not remove LOCAL SERVICE since this is used by Windows.


    4 When finished, you can close the elevated command prompt if you like.
    Allow or Prevent Users and Groups to Change Time in Windows 10-allow_user-group_to_change_time_command.png Allow or Prevent Users and Groups to Change Time in Windows 10-prevent_user-group_to_change_time_command.png


    That's it,
    Shawn


    Related Tutorials



  1. Windows 11 Tutorials



  2. ricardobohner
    Posts : 456
    Windows 10
       New #1

    No way to change this from command line without downloading software?

    I heard this command should do the trick but to no avail, at least it doesn't block admins from changing time:

    reg add HKLM\Software\Policies\Microsoft\International\ /t Reg_Dword /v PreventUserOverrides /d 1 /f
      My Computer
    Quote Quote

  4. Brink
    Posts : 72,962
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       New #2

    ricardobohner said:
    No way to change this from command line without downloading software?

    I heard this command should do the trick but to no avail, at least it doesn't block admins from changing time:

    reg add HKLM\Software\Policies\Microsoft\International\ /t Reg_Dword /v PreventUserOverrides /d 1 /f
    I haven't heard of a way, but hopefully someone else may have.
      My Computers
    Quote Quote

  5. maecmb
    Posts : 2
    Windows 10 Home
       New #3

    Prevent Administrators?


    Is it possible to prevent another user who has admin rights from changing date and time?
    When I change the user account type to "standard" everything you listed works.
    But when I change that user to an administrator, they have capability to change date and time again, even with these "rules" in place.

    Thanks!
      My Computer
    Quote Quote

  6. Brink
    Posts : 72,962
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       New #4

    maecmb said:
    Is it possible to prevent another user who has admin rights from changing date and time?
    When I change the user account type to "standard" everything you listed works.
    But when I change that user to an administrator, they have capability to change date and time again, even with these "rules" in place.

    Thanks!
    Hello maecmb, and welcome to Ten Forums.

    I'm afraid not. An administrator has the rights to make any changes.

    Only keeping the account as a standard user will prevent.
      My Computers
    Quote Quote

  7. maecmb
    Posts : 2
    Windows 10 Home
       New #5

    Thanks for the quick reply!
    Ok so is it possible to give standard users other rights for programs without admin permission?
    Long story short, I want my child to be able to freely download games and updates without me having to type in my pin as an administrator every single time, but I don't want them to be able to change the time on their PC and basically override my parental controls and stay up all night because their PC thinks its 3pm haha. Trying to find that balance!
      My Computer
    Quote Quote

  8. Brink
    Posts : 72,962
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       New #6

    maecmb said:
    Thanks for the quick reply!
    Ok so is it possible to give standard users other rights for programs without admin permission?
    Long story short, I want my child to be able to freely download games and updates without me having to type in my pin as an administrator every single time, but I don't want them to be able to change the time on their PC and basically override my parental controls and stay up all night because their PC thinks its 3pm haha. Trying to find that balance!
    You can change user rights assignments to allow the "Users" group or specific users certain rights they wouldn't normally have.

    However, I don't see one that allows a standard user to be able to install and update games that require elevated rights to do so.
      My Computers
    Quote Quote

 

Tutorial Categories

Allow or Prevent Users and Groups to Change Time in Windows 10 Tutorial Index Network & Sharing Instalation and Upgrade Browsers and Email General Tips Gaming Customization Apps and Features Virtualization BSOD System Security User Accounts Hardware and Drivers Updates and Activation Backup and Restore Performance and Maintenance Mixed Reality Phone


  Related Discussions
How to Allow or Prevent Users and Groups to Shut down System in Windows 10 If you don't plan to use your PC for a while, then you could shut down (turn off) the PC. A shutdown will close all apps, sign out all users, and completely turn off the...
How to Allow or Prevent Users and Groups to Create a Pagefile in Windows 10 Paging is a memory management scheme by which a PC stores and retrieves data from secondary storage for use in main memory. In this scheme, the operating system...
How to Allow or Prevent Users and Groups to Log on with Remote Desktop in Windows 10 You can use the Remote Desktop Connection (mstsc.exe) or Microsoft Remote Desktop app to connect to and control your Windows 10 PC from a remote device. When...
How to Allow or Prevent Users and Groups to Sign in Locally to Windows 10 By default, you need to dismiss the lock screen and enter your credentials to sign in to Windows 10 with your account. By default, Users, Guests, Backup Operators, and...
How to Allow or Prevent Users and Groups to Change Time Zone in Windows 10 Your PC's clock is used to record the time whenever you create or modify files on your PC. You can change the clock's time and time zone. A time zone is a region that...
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

 © Designer Media Ltd
All times are GMT -5. The time now is 07:17.
Find Us




Windows 10 Forums