Clients Can't Change Time/Date

[thrustinj]

We have Time/Date available for all users on the network because even though a time server is used, a few machines occasionally lose the time sync.

However when they go to set the time (for admins, just unlocking the panel makes it check the time server), they can't because the lock won't unlock.

Is this the default lock position? Why can't users unlock it?

 

[theyellowdart]

My understand is this. Since so much stuff is reliant on the clock of the system, giving the basic user the ability to change the clock can be somewhat of a security risk due to the fact that they can change it and cause certain programs the Admin may have setup (In a cron for example) to run, or various other issues. Not to mention time is vital part of the security of Kerberos.

Now, I'm not positive that's the case, but it makes sense to me.