Prevent Users From Changing Date and Time in Windows 10

To prevent users from changing the date and time in Windows 10, you can use Group Policy, Registry Editor, or standard user account permissions. This article explains the three methods step by step, what each one does, and how to choose the right one for your situation.

Why You Might Want to Lock the Clock

Windows 10 lets any user with administrator rights change the system date and time by default. Standard users are usually blocked from changing it directly, but they can still alter it if they know the administrator password or if the system is configured loosely. Locking the clock matters in several real scenarios:

• Parental controls: Kids can bypass screen time limits by moving the clock forward.
• Work or school computers: Tampering with the clock can break file timestamps, scheduled tasks, and audit logs.
• Security and compliance: Accurate time is critical for encryption certificates, Kerberos authentication, and event log forensics.
• Kiosk or public machines: Users may change the time to confuse licensing or monitoring software.

Once you lock the time, only the original administrator (or a designated one) can adjust it. The methods below work on Windows 10 Pro, Enterprise, and Education editions; Windows 10 Home lacks Group Policy Editor, but you can still use the Registry or user permissions.

Method 1: Group Policy (Pro, Enterprise, Education)

Group Policy is the cleanest way to control who can change the system time. It applies the same setting to all users on the machine and can be managed centrally on a domain.

1. Press Win + R, type gpedit.msc, and press Enter.
2. Navigate to Computer Configuration → Windows Settings → Security Settings → Local Policies → User Rights Assignment.
3. In the right pane, find Change the system time and double-click it.
4. Remove all users and groups except the ones you want to allow (e.g., Administrators or a specific service account).
5. Click OK and close the editor.

There is also a separate policy called Change the time zone. If you only want to prevent time changes but allow time zone adjustments, leave that one alone. To apply the policy immediately, open a command prompt as administrator and run gpupdate /force.

On a domain network, you would configure the same setting in a Group Policy Object (GPO) linked to the relevant organizational unit. The local policy is overridden by domain policy, so make sure your domain GPO is the one you edit.

Method 2: Registry Editor (All Editions, Including Home)

If you have Windows 10 Home, or you prefer a direct registry tweak, you can lock the time by editing a single value. This method is more fragile than Group Policy, so back up your registry first.

1. Press Win + R, type regedit, and press Enter.
2. Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System.
3. If a key named System doesn’t exist, right-click on Policies, choose New → Key, and name it System.
4. Right-click on the System key, choose New → DWORD (32-bit) Value.
5. Name it DisableChangeTime.
6. Double-click it and set the value to 1.
7. Click OK and restart the computer (or restart Explorer) for the change to take effect.

Setting the value to 0 or deleting the DWORD re-enables time changes. This registry value works by denying the “Change the system time� privilege to all non-administrator users. It is not a security boundary—an administrator can simply reverse it—but it stops everyday tampering.

Method 3: Standard User Accounts (No Admin Rights)

By default, Windows 10 already prevents standard users from changing the date and time. The system time is protected by the SeSystemtimePrivilege right, which is granted only to Administrators and (in some configurations) to the SYSTEM account. If your users are already standard accounts, you don’t need to do anything.

However, a standard user can still change the time if the system prompts for an administrator password and they know it. To close that loophole, you can combine this method with Group Policy or Registry changes that remove the ability even when prompted. Alternatively, you can disable the User Account Control (UAC) prompt for time changes, but that weakens overall security and is not recommended.

If you want to verify who can change the time on your system, open a command prompt as administrator and run secedit /export /areas USER_RIGHTS /cfg secpol.cfg, then open the resulting file and look for SeSystemtimePrivilege. You’ll see the SIDs of the groups that have the right.

How to Choose the Right Method

Your choice depends on your edition, environment, and how strict you need to be:

• Windows 10 Pro/Enterprise/Education, single PC: Use Group Policy. It’s easy to revert and you can also lock the time zone separately.
• Windows 10 Home: Use the Registry method. It’s the only built-in way to enforce the restriction without third-party software.
• Domain network: Use a domain GPO so the setting is applied to all computers centrally.
• Just need to stop kids or casual users: Standard accounts alone are usually enough. If they know the admin password, combine with Group Policy or Registry.

None of these methods is a true security measure—they are administrative controls. A determined user with physical access and admin rights can always change the time. For a tamper-proof solution, you would need hardware-based clocks (like a GPS time source) or BIOS/UEFI password protection, which is beyond Windows settings.

Common Problems and Pitfalls

Even after you lock the time, you may run into issues:

• Time still changes: If the machine is on a domain, the domain controller may be resetting the time via W32Time service. That’s normal and desirable—you’re blocking manual changes, not automatic synchronization.
• Group Policy doesn’t apply: Run gpupdate /force and check Event Viewer for policy errors. If you edited the local policy but a domain GPO overrides it, the domain policy wins.
• Registry method stops working after an update: Windows updates can reset some policy keys. Reapply the DWORD after major feature updates.
• You locked yourself out: If you remove Administrators from the “Change the system timeâ€� right, you won’t be able to change the time even as admin. Always leave at least Administrators in the list.
• Time zone changes still allowed: The “Change the time zoneâ€� right is separate. If you want to block that too, edit the corresponding policy or registry value (DisableChangeTimeZone).

What About Windows 10 Home and Third-Party Tools?

Windows 10 Home does not include gpedit.msc, but you can still use the Registry method. Some third-party parental control or kiosk software also offers a “lock timeâ€� option, but they often just modify the same registry values or user rights under the hood. Using built-in tools is safer and free.

Another option for Home edition is to use the Local Security Policy editor (secpol.msc), but that tool is also not available in Home. The Registry method is the only native route for Home users.

Frequently Asked Questions

Can I prevent a standard user from changing the time without admin rights?

Yes, by default standard users cannot change the system time. If they try, Windows prompts for an administrator password. To stop them even when they know the password, use Group Policy or the Registry method to remove the “Change the system time� right from all non-admin groups.

Is there a way to lock the time on Windows 10 Home without registry editing?

No, not with built-in tools. Windows 10 Home lacks Group Policy Editor and Local Security Policy. You could use a third-party tool, but they usually just edit the same registry value. The registry method is straightforward and reversible.

Does locking the time prevent automatic time synchronization?

No. The methods described here only block manual changes by users. The Windows Time service (W32Time) can still sync the clock with a time server. If you want to disable automatic sync too, you would need to stop the Windows Time service or change its settings, which is a separate action.

What if I want to allow time zone changes but block time changes?

That’s exactly what the Group Policy method does if you only edit Change the system time and leave Change the time zone untouched. In the Registry, you would set DisableChangeTime to 1 but leave DisableChangeTimeZone unset or set to 0.

Will these methods work on Windows 11?

Yes, the same Group Policy and Registry paths work on Windows 11. The user interface may look slightly different, but the underlying security settings are the same.

Can a user bypass this by changing the BIOS clock?

Yes, if they have physical access and know the BIOS/UEFI password (or if there is none). Windows-level restrictions do not protect against hardware-level changes. For high-security environments, set a BIOS password and disable boot from external media.

Related

• How to Make a Facebook Page: Complete Guide
• Fix Switch Sports Motion Control & Joy-Con Tracking
• Pixel Buds 2 Audio Cutout Issues: Fixes That Work