|
Do I take it that you only want the users to have read only access? or could you not add Domain Users group to the local machine GPO?
Not wanting to teach granny to suck eggs but this can be found in MMC > Console > Add/Remove Snap-In ... Add > Group Policy. Then select Local Computer Policy > Computer Configuration > Windows Settings > Security Settings > Local Policies >User Rights Assignment. Change the system time.
Rory
| 
