Changing the system time and time zone
Giving standard users the ability to change the system time is not recommended. However, for Windows XP notebook users who travel, you may not have a choice. Here are the three primary reasons for restricting standard user access to the system time:
- In a domain environment, PCs must have their time synchronized with domain controllers for successful logon.
- Allowing users to modify the system time will put your organization beyond some of the regulatory requirements.
- When users control the system time, it can be difficult or impossible to investigate security incidents and prove the order of events. This may hinder detection of malicious activity..
ISO 27001 Information Security Standard
10.10.6 Clock Synchronization. ...