Unable to modify local security setting - Change the system time

Hello All,

I have a memeber server on a domain and I want to change who has the right
to "Change the system time" on the local security setting via the MMC. I have
located the local policy and open it.

I am presented with the following Users and Groups who have the right to
change the system time;

Administrators
LOCAL SERVICE
Power Users

I would like to remove the LOCAL SERVICE account from the list and prevent
it from changing the system time.

I am unable to do this, however, as both the option buttons ADD USER/GROUP
and REMOVE are greyed out.

The default domain group policy does not have any settings enabled on the
domain and there is no other GPO applied to the server.

The server is Windows 2003 R2 SP2 Enterprise with the latest patches.

Can anyone offer any advice or guidance?

I have since discovered that the LOCAL SERVICE account has been given the
right to change the system time following problems with SP1 of 2003.

The KB is here. http://support.microsoft.com/kb/892501

Thanks,

Maw

"Martin Williams" wrote:

> Hello All,
>
> I have a memeber server on a domain and I want to change who has the right
> to "Change the system time" on the local security setting via the MMC. I have
> located the local policy and open it.
>
> I am presented with the following Users and Groups who have the right to
> change the system time;
>
> Administrators
> LOCAL SERVICE
> Power Users
>
> I would like to remove the LOCAL SERVICE account from the list and prevent
> it from changing the system time.
>
> I am unable to do this, however, as both the option buttons ADD USER/GROUP
> and REMOVE are greyed out.
>
> The default domain group policy does not have any settings enabled on the
> domain and there is no other GPO applied to the server.
>
> The server is Windows 2003 R2 SP2 Enterprise with the latest patches.
>
> Can anyone offer any advice or guidance?