Changing the Timezone vs. Changing the Time

[Dave]

I know how to allow non-Administrators/Power Users to change the TimeZone and
the System Time, but is there a way to allow one and not the other?

I'd like to allow them to change the TimeZone only and not the System Time.

Any ideas?

 

[Shenan Stanley]

I know how to allow non-Administrators/Power Users to change the
TimeZone and the System Time, but is there a way to allow one and
not the other?

I'd like to allow them to change the TimeZone only and not the
System Time.

Any ideas?

I don't *think* you can do this - although maybe it is possible... But I
have to ask - why would you allow one and not the other? What are you
trying to prevent? And can they get into the system BIOS?

 

[Tim Meddick]

Yes, it's possible.

Simply disallow the user or group to change the system time in the Group
Policy Editor ('Computer Configuration' > 'Windows Settings' > 'Security
Settings' > 'Local Policies' > 'User Rights Assignment' then 'Change the
System Time' ) and remove the user or group.
(By default limited users cannot change the system time)

Then give the user a timezone editor (like TZEDIT.EXE) but before doing do
assign the user or group FULL permissions over the following key:


HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones


...then they will be able to use the Timezone Editor to change / edit
timezone information.

==



Cheers, Tim Meddick, Peckham, London.

 

[John John - MVP]

Actually they will need permission on
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\TimeZoneInformation

The TZEdit tool is used to change the time zone information, for example
to change the DST Start and End dates and time bias or change the GMT
offset, but it can't be used to move your computer to a different time
zone.

John

Yes, it's possible.

Simply disallow the user or group to change the system time in the Group
Policy Editor ('Computer Configuration' > 'Windows Settings' > 'Security
Settings' > 'Local Policies' > 'User Rights Assignment' then 'Change the
System Time' ) and remove the user or group.
(By default limited users cannot change the system time)

Then give the user a timezone editor (like TZEDIT.EXE) but before doing do
assign the user or group FULL permissions over the following key:


HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones


..then they will be able to use the Timezone Editor to change / edit
timezone information.

==



Cheers, Tim Meddick, Peckham, London.

 

[Tim Meddick]

I am aware that the information I gave was incomplete (I admit, I didn't
actually know the location of the other key involved) however, my thoughts
are that if the OP really wants to pursue a suggestion of mine, then they
will re-post asking for more information, and I am ready to fill in or
research the matter further with the OP.

==

Cheers, Tim Meddick, Peckham, London.

Actually they will need permission on
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\TimeZoneInformation

The TZEdit tool is used to change the time zone information, for example
to change the DST Start and End dates and time bias or change the GMT
offset, but it can't be used to move your computer to a different time
zone.

John

 

[Dave]

Thansk for the info. I'll look into TZedit. That may help. Unfortunately
I'm in a situation where almost any that involves more than double clicking
the time in the system tray is considered too complicated.

 

[Tim Meddick]

I think that if you were to change their accounts to 'Power User' access,
then remove 'Power Users' from the item : "Change the system time" in the
'Group Policy Editor' (found in : 'Computer Configuration' > 'Windows
Settings' > 'Security Settings' > 'Local Policies' > 'User Rights
Assignment')

This would stop the user from changing the system time but allow the user to
change the time zone using: TimeZone Command-Line Editor -

http://www.dynawell.com/download/reskit/microsoft/win2000/timezone.zip

Although it is a tiny bit complex - you could make two (or even three,
depending on the size of the users brain) batch files for them to
'double-click' on, that change the TZ to pre-specified values and named
something relevant (e.g. BST.bat, EST.bat GMT.bat, etc).

Hope that's given you some more ideas.

==

Cheers, Tim Meddick, Peckham, London.

 

[Dave]

Thanks. Settings like that are locked down fairly tightly here (Governmental
Agency). I don't think I'm going to be able to do it the way it's been
requested.