Grant Rights to Change System Time in Windows XP

In Windows XP, standard user accounts were restricted from altering the clock to maintain system integrity and accurate event logging. Granting a standard user or group the ability to adjust the clock required assigning a specific user right called "Change the system time" within the Windows Local Security Policy or Active Directory Group Policy. By default, this privilege was exclusively reserved for members of the Administrators and Power Users groups.

The Required User Right: "Change the system time"

The specific security setting required is Change the system time (internally designated by Windows as SeSystemtimePrivilege).

In Windows XP, this setting controlled both modifying the actual clock time/date and changing the system time zone. Unlike later Windows versions (such as Windows Vista and newer), Windows XP did not have an independent "Change the time zone" privilege; adjusting the time zone required full permission to modify the system time.

How to Configure the Permission in Windows XP

To assign this privilege on a standalone Windows XP Professional computer, follow these steps:

  1. Open Local Security Settings:

    • Click Start, select Run, type secpol.msc, and press Enter.
    • Alternatively, open the Control Panel, navigate to Administrative Tools, and launch Local Security Policy.

  2. Navigate to User Rights Assignment:

    • Expand Security Settings in the left pane.
    • Expand Local Policies.
    • Click on User Rights Assignment.

  3. Modify the Policy Setting:

    • In the right pane, locate and double-click the policy named Change the system time.
    • Review the list of existing accounts (typically Administrators and Power Users).
    • Click Add User or Group...
    • Enter the name of the standard user account or a local group (such as Users) that requires the ability to adjust the clock.
    • Click Check Names to validate, then click OK.
    • Click Apply, then OK to close the policy dialog.

Applying the Changes

Once assigned, the affected user must log off and log back into Windows XP for the updated security token to take effect. If managing permissions across a domain environment, the same setting can be configured via the Group Policy Management Console (gpedit.msc) under Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment, and updated on client machines using the gpupdate /force command.