Details

Change the system time

This user right determines which users and groups can change the time and date on the internal clock of the computer. Users that are assigned this user right can affect the appearance of event logs. If the system time is changed, events that are logged will reflect this new time, not the actual time that the events occurred.

This user right is defined in the Default Domain Controller Group Policy object (GPO) and in the local security policy of workstations and servers.

Default on workstations and servers:

Administrators

Local Service

Default on domain controllers:

Administrators

Server Operators

Local Service

Solution

Policy Path: Local PoliciesUser Rights Assignment
Policy Name: Change the system time

Supportive Information

The following resource is also helpful.

• https://www.microsoft.com/en-us/download/details.aspx?id=55319

This security hardening control applies to the following category of controls within NIST 800-53: Access Control.This control applies to the following type of system Windows.

References

• 800-53|AC-6(7)(b)
• CSCv6|5.1

Source

• Tenable.com/audits