Re: Group policy help

["Greg" <pchandyman () ozemail com au>]

----- Original Message ----- 
From: "Peter Rodger" <prodger2008 () yahoo com>
To: <security-basics () securityfocus com>
Sent: Friday, October 15, 2004 11:54 PM
Subject: Group policy help


> Hi, all
>
> Due to security concern, we enforce that users 
> can not change system time.  But somehow lots of
> users do not check the daylight savings box.  Is 
> there a way that we can check daylight savings box
> through group policy or script?
> Thanks,

Assuming you can run a script from a remote machine, put the following in it. If you can not do that for whatever 
reason then obviously you need to go to each machine. I would also change the registry to make it impossible for them 
to make registry changes and to enforce the settings you have chosen or you may find this information basically useless 
if your users can do registry hacks. 

However, go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\TimeZoneInformation and either locate the valuename 
(or add, as applicable) "DisableAutoDaylightTimeSet". The Dword value should be set to 
1 = to disable changing it.

Greg.