[Question] - Windows Clock

[itdude59]

In our company we clock in and out using a simple little program on a pc. The time on the "virtual clock" program syncs with the windows system clock. How can i lock the windows clock to where an employee can't just change the time and make his/her own hours. We are having a problem with that at one of our locations.. I have found a few trial programs, but would appreciate any advice to just remove the clock all together or password protect it somehow.

Title Edited - Please follow new posting rules from now on.

--Zxian

Edited December 6, 2005 by Zxian

[net_user]

are your computers on a domain?

also...

how are the users setup? ie administrators/powerusers?

[cluberti]

If you are on a domain and the users are not admins on their local machine, you can remove their permission to modify the clock's settings by removing their permission to change the system time. If you are not on a domain, you can still use the utility ntrights.exe (from the resource kit) to remove some group's ability to change the system time using the following command:

ntrights.exe -r SeSystemtimePrivilege -u <user or group name>

Note that you should not remove this privilege for administrative users, or you may have issues with the time synchronization service (w32time). That's why users need to be at least power users or lower to be able to do this.

The resource kit is located:

http://www.microsoft.com/downloads/details...&DisplayLang=en

It will only install on 2K3 or XP, but you can then take the ntrights.exe file and run it on a Windows 2000 machine without issue, for what it's worth; it's a stand-alone executable.