How to prohibit users from changing the system time?
-
The computer user can log on Win2000 as an administrator, while he should be forbidden to change the system time under windows 2000. Of course we can carry this point by setting the "User Rights Assignment" through the "Domain Controller Security Policy" tool, but how can we gain this end through VC programing?:confused:
-
The computer user can log on Win2000 as an administrator, while he should be forbidden to change the system time under windows 2000. Of course we can carry this point by setting the "User Rights Assignment" through the "Domain Controller Security Policy" tool, but how can we gain this end through VC programing?:confused:
Are you asking how to prevent the system administrator from adminstering the system? Why not have the user logon as something other than Administrator? Even if you do this, what keeps the Administrator from simply resetting the right manually? (Or does it not matter). You can post messages to any window. So if you can get the the gui of the tool you need opened, you can send messages to it and any controls in it. That gives your program control of the tool.
-
Are you asking how to prevent the system administrator from adminstering the system? Why not have the user logon as something other than Administrator? Even if you do this, what keeps the Administrator from simply resetting the right manually? (Or does it not matter). You can post messages to any window. So if you can get the the gui of the tool you need opened, you can send messages to it and any controls in it. That gives your program control of the tool.
Thank you for your reply. I am working for a special system. The user must logon as an administrator, and he can access "command console" only. How to prevent him from changing the system time then?
-
Thank you for your reply. I am working for a special system. The user must logon as an administrator, and he can access "command console" only. How to prevent him from changing the system time then?
I think you will need to set the rights using the Domain Controller Security Tool, you mentioned in your original post. I'm not familiar with that tool, but if you can figure out how to launch it from your program, if you can get the the gui of the tool you need opened, you can send messages to it and any controls in it. That gives your program control of the tool.
-
I think you will need to set the rights using the Domain Controller Security Tool, you mentioned in your original post. I'm not familiar with that tool, but if you can figure out how to launch it from your program, if you can get the the gui of the tool you need opened, you can send messages to it and any controls in it. That gives your program control of the tool.
Thank you again. You are right that I can set the rights by using the tool([Start]-[Programs]-[Administrate tools]-[Local Security Policies]-[Security Setting]-[Local Policies]-[User Rights Assignment]). I just want to restrict the user in an unvisible or hidden process. That is, we should not see the gui of the tool. How to implement it throught VC programing?