Local Admin Rights -> but no right to change the System Time?

  • Thread starter Thread starter Reinhard Mader
  • Start date Start date
R

Reinhard Mader

Is this possible?

I addes in my domain a user to the Local Administrator Group; because there
is some software running that needs administrator rights. But it should not
be possible for the User to change the System Time.

In the Default Domain Policy i gave the Rights for Changing System Time only
Domain Admins. But the User(s) can still change the System time (because
they're in the Local Admin Group).

Is there a reason for my Problem?

Many Thanks for Help

Reinhard
 
Once they are a local admin of the machine they can do whatever they
want....
 
It is difficult to impossible to restict a local administrator who knows the
power of the acount. The setting you are configuring is a machine policy, so
be sure that the computer is in the scope of influence of the GPO and look
at effective settings in the Local Security Policy to see if the policy is
being propagated to be what you expect. --- Steve
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Local Admin Rights 3
Local admin accounts gone haywire 8
Administrative Rights 1
Local Admin & Group Policy Question 6
Local Group Policy is assigning only to user with admin rights !!??? 1
local admin w/o network rights 2
Domain User can't login unless it has local Administrators right 0
Having trouble restricting Rights 1

Back
Top