Restrict users from changing date and time on Windows and macOSSolved

Participant
Discussion
3 weeks ago Sep 04, 2026

I manage both Windows and macOS devices with Hexnode. Since some app update policies and schedules depend on the device time, should users be allowed to modify the system date and time?

I do not want users, whether standard users or admins, changing the clock and bypassing update schedules or causing sync issues. What is the recommended way to block or control date and time changes on Windows and macOS?

Replies (1)

Marked SolutionPending Review
Hexnode Expert
3 weeks ago Sep 04, 2026
Marked SolutionPending Review

Hi @gnishilda,

Accurate device time is important for several management and security functions, including SSL/TLS certificate validation, authentication, MDM communication, scheduled policies, and update enforcement. If users can alter the local clock, it may cause sync failures, authentication errors, or policy bypasses.

Hexnode app update policies are handled through background agent services with elevated permissions, so standard users do not need access to date and time settings for updates to work.

For Windows devices:

  1. Go to Policies > Windows > Advanced Restrictions.
  2. Open Allow Device Functionality.
  3. Disable Users can change date and time.
  4. Save and associate the policy with the required devices or device groups.

For macOS devices:

Date and time settings should be enforced centrally. You can do this by deploying a custom configuration profile or a shell script through Hexnode to configure the NTP time server and time zone. This helps keep macOS devices synchronized without relying on users to set the time manually.

Regards,
Sienna Carter
Hexnode UEM

Save