How to Disable Time and Date Changes via Microsoft Intune

How to Disable Time and Date Changes via Microsoft Intune

In some organizations, it’s critical to prevent users from modifying the time and date settings on their devices. This can help maintain accurate system logs, enforce security policies, and ensure compliance. Microsoft Intune allows you to manage these settings through Device Configuration Profiles.

Follow the steps below to disable the ability to change the time and date on Windows devices using Intune.

Step 1: Create a Device Configuration Profile

1. Log in to the Microsoft Intune Admin Center at https://endpoint.microsoft.com.
2. Navigate to Devices → Configuration Profiles.
3. Click on + Create Profile.
4. Choose Windows 10 and later for the platform.
5. Select Device Restrictions for the profile type.
6. Click Create.

Step 2: Configure Restrictions for Time and Date

1. Profile Name: Enter a name for the profile (e.g., Disable Time and Date Changes).
2. Under Configuration Settings, scroll down to the General section.
3. Find the setting for Date and Time.
4. Set the option Disable Changing Date and Time to Yes. This will prevent users from manually changing the time and date on their devices.This setting will disable access to the Date and Time options in the Windows Settings. Users will not be able to change their system time unless they have administrative privileges.

Step 3: Assign the Profile to Devices

1. After configuring the settings, click Next to proceed to the Assignments section.
2. Choose the device groups or user groups you want to apply this policy to.
3. Click Next to review your settings and then click Create to deploy the profile.

Step 4: Monitor the Deployment

1. Once the profile is deployed, navigate to Devices → Monitor → Device Configuration in the Intune Admin Center to monitor the deployment status.
2. Ensure that the profile has been successfully applied to the target devices.

Step 5: Verify on End Devices

1. After the policy is applied, verify the settings on a test device:
   • Go to Settings → Time & Language → Date & Time.
   • The options to manually change the date and time should be grayed out or unavailable.
2. Test User Access:
   • Attempt to change the time or date manually. If the policy is enforced correctly, users will be unable to make changes to the system’s date and time settings.

Step 6: Additional Options (Optional)

If needed, you can also configure additional settings related to Date and Time through Windows 10 MDM policies or PowerShell scripts for more advanced configurations.

Conclusion

By using Microsoft Intune’s Device Configuration Profiles, you can easily restrict users from changing the system time and date. This setting helps to maintain system integrity, ensure compliance, and secure your environment from tampering with critical time-sensitive data.