none
Unable to prevent the domain users to change time zone in server 2012 domain GPO

    Question

  • Dear Sir'

    I am unable to find ENABLE or NOT CONFIGURED option in "change time zone " gpo.

    So please update me how can I restrict the domain users for change date time and zone from their client machine which are add in domain

    please find snapshot


    Manjesh Kaushik

    Monday, February 20, 2017 10:41 AM

Answers

  • Hi Manjesh,

    You can configure this policy "Prohibit access to Control Panel and PC settings". This policy is located at User Configuration\Administrative Templates\Control Panel in group policy management.

    Enable this policy on users OU or default domain controller and update the group policies by executing gpupdate on command prompt.

    Good luck. If this help, mark it as answer.

    / Karim

    Monday, February 20, 2017 11:14 AM

All replies

  • Hi Manjesh,

    Client users are by default restricted to change date and time on domain joined client computer. However, they can change time zone.

    S0 what you are actually doing to restrict client users?

    / Karim

    Monday, February 20, 2017 10:48 AM
  • Hi Karim

    Thanks for your quick response. Yes Sir I want to restrict to change time zone. please update me how can i do .


    Manjesh Kaushik

    Monday, February 20, 2017 10:52 AM
  • Hi Manjesh,

    You can configure this policy "Prohibit access to Control Panel and PC settings". This policy is located at User Configuration\Administrative Templates\Control Panel in group policy management.

    Enable this policy on users OU or default domain controller and update the group policies by executing gpupdate on command prompt.

    Good luck. If this help, mark it as answer.

    / Karim

    Monday, February 20, 2017 11:14 AM
  • Hi,
     
    Am 20.02.2017 um 11:41 schrieb Manjesh Kaushik:
    > I am unable to find ENABLE or NOT CONFIGURED option in "change time zone " gpo.
     
    Timezone should be changable by users. The user is probbly changing
    location, the user wants to ork in the local time, to get to meetings,
    to do a phone call, whatever. It´s a comfort feature, you should not
    disable.
     
    The client system knows all about mathematics and counting time. It will
    not break your Kerberos, simply because it´s timezone, not "time".
    Why should a user "count" time, if the system can handle it for him?
     
    The user can change he timezone on his watch, his selfphone changes
    automatically by connecting into the new timezone. Why should the
    computer not do it? Makes no sense to me.
     
    Mark
    --
    Mark Heitbrink - MVP Group Policy - Cloud and Datacenter Management
     
    Homepage:  http://www.gruppenrichtlinien.de - deutsch
     
    GET Privacy and DISABLE Telemetry on Windows 10 - gp-pack PaT
     
    Monday, February 20, 2017 11:22 AM
  • Hi Karim

    I ,ve configured the same as you mentioned in thread. when I tried to change the time zone the I got below message instead of Username and password Popup. so in such case how can i change if i need. so please update me how can i get the username and password window popup beacause this is simple way if I really need to change.


    Manjesh Kaushik

    Monday, February 20, 2017 11:54 AM
  • Am 20.02.2017 um 12:54 schrieb Manjesh Kaushik:
    > I ,ve configured the same as you mentioned in thread.
    Where is your problem in configure "Change Time Zone" from your first
    screenshot and only add "Administrators" Group into?
     
    Mark
    --
    Mark Heitbrink - MVP Group Policy - Cloud and Datacenter Management
     
    Homepage:  http://www.gruppenrichtlinien.de - deutsch
     
    GET Privacy and DISABLE Telemetry on Windows 10 - gp-pack PaT
     
    Monday, February 20, 2017 12:19 PM