Details
This setting determines which users can change the time zone of the computer. This ability holds no great danger for the computer and may be useful for mobile workers.
The recommended state for this setting is: Administrators, LOCAL SERVICE, Users.
Rationale:
Changing the time zone represents little vulnerability because the system time is not affected. This setting merely enables users to display their preferred time zone while being synchronized with Domain Controllers in different time zones.
Impact:
None – this is the default behavior.
Solution
To establish the recommended configuration via GP, set the following UI path to Administrators, LOCAL SERVICE, Users:
Computer ConfigurationPoliciesWindows SettingsSecurity SettingsLocal PoliciesUser Rights AssignmentChange the time zone
Default Value:
Administrators, LOCAL SERVICE, Users.
Supportive Information
The following resource is also helpful.
This security hardening control applies to the following category of controls within NIST 800-53: Access Control.This control applies to the following type of system Windows.