Allow all the standard windows 10 users to change/sync time and date settings

Abhi Hebsur 6 Reputation points
2021-01-11T23:00:04.843+00:00

Hi,

I'm looking for a way to push an organization wide policy which lets Standard users to change/sync their date and time settings. All these devices are Intune managed. Currently all the users have their "Sync time" button greyed out and needs admin credentials to sync time.

I have enabled Location to all users under https://endpoint.microsoft.com -> Devices -> Config Policy -> Device restrictions -> Privacy -> Enable location.

Any help is much appreciated.

Windows
Windows
A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
5,478 questions
Windows 10 Setup
Windows 10 Setup
Windows 10: A Microsoft operating system that runs on personal computers and tablets.Setup: The procedures involved in preparing a software program or application to operate within a computer or mobile device.
1,947 questions
Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
5,173 questions
0 comments No comments
{count} vote

5 answers

Sort by: Most helpful
  1. Vicky Wang 2,731 Reputation points
    2021-01-12T09:08:10.71+00:00

    First, sign in with an administrative account and open the Group Policy Editor by hitting Start, typing “gpedit.msc”, and then pressing Enter. In the Group Policy window, in the left-hand pane, drill down to Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignments. On the right, find the “Change the system time” item and double-click it.
    55534-capture6.png

    On the “Local Security Setting” tab of the properties window that pops up, note that by default, only the Administrators and LOCAL SERVICE groups are currently listed as having permission. Click “Add User or Group.”
    55526-capture7.png
    By default, Windows does not include group names when you perform a search, so you’ll need to enable that first. Click the “Object Types” button.
    55611-capture8.png

    In the Object Types window, select the Groups check box to enable it and then click OK.

    55508-capture9.png

    In the “Enter the object names to select” box, type “Users” and then click the “Check Names” button. Windows will check against usable names and then fill out the box with the full name of the group (<yourPCname>\Users). When that’s done, click OK.

    55516-capture10.png

    Back in the properties window for the system time setting, you can see that the Users group has now been added to the permissions list. Click OK to apply the settings and return to the Group Policy Editor.

    55517-image.png
    And that’s all there is to it. You can now exit the Group Policy Editor. To test the new settings, just sign in with a standard user account and try changing the time or date. And if you change your mind and want to prevent standard users from changing the time and date, just use Group Policy Editor to return to that setting and remove the Users group from the permissions list.

    3 people found this answer helpful.

  2. Jason Sandys 31,301 Reputation points Microsoft Employee
    2021-01-12T15:56:00.073+00:00

    Note that there is no direct way to configure the setting noted above by @Vicky Wang in Intune and that device restriction policies are completely unrelated. You can however deploy a script using Intune that changes this privilege or use a custom profile that leverages the UserRights settings in the Policy CSP: https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-userrights.

    Keep in mind though that a system's time is used during many critical security processes so this may not be the best idea.

    Why do users need to manually sync or change the time on their systems? Time sync is an automatic process in Windows that requires no user intervention. See https://learn.microsoft.com/en-us/windows-server/networking/windows-time-service/how-the-windows-time-service-works for details.


  3. Vicky Wang 2,731 Reputation points
    2021-01-15T09:07:03.95+00:00

    Hi,

    Just checking in to see if the information provided was helpful.

    Please let us know if you would like further assistance.

    Best Regards,
    Vicky

    0 comments No comments

  4. Vicky Wang 2,731 Reputation points
    2021-01-18T08:43:14.04+00:00

    Hi,

    Just checking in to see if the information provided was helpful.

    Please let us know if you would like further assistance.

    Best Regards,
    Vicky

    0 comments No comments

  5. Abhi Hebsur 6 Reputation points
    2021-01-18T22:14:09.993+00:00
    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.