Unable to modify local security setting - Change the system time

Discussion in 'Server Security' started by Martin Williams, Feb 17, 2009.

  1. Hello All,

    I have a memeber server on a domain and I want to change who has the right
    to "Change the system time" on the local security setting via the MMC. I have
    located the local policy and open it.

    I am presented with the following Users and Groups who have the right to
    change the system time;

    Administrators
    LOCAL SERVICE
    Power Users

    I would like to remove the LOCAL SERVICE account from the list and prevent
    it from changing the system time.

    I am unable to do this, however, as both the option buttons ADD USER/GROUP
    and REMOVE are greyed out.

    The default domain group policy does not have any settings enabled on the
    domain and there is no other GPO applied to the server.

    The server is Windows 2003 R2 SP2 Enterprise with the latest patches.

    Can anyone offer any advice or guidance?
     
    Martin Williams, Feb 17, 2009
    #1
    1. Advertisements

  2. I have since discovered that the LOCAL SERVICE account has been given the
    right to change the system time following problems with SP1 of 2003.

    The KB is here. http://support.microsoft.com/kb/892501

    Thanks,

    Maw
     
    Martin Williams, Feb 17, 2009
    #2
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.