15

I'm using the "Time Limit" feature of Windows Live Family safety.

I've placed a time restriction on my computer from 12 AM to 4 AM. However if someone changes the BIOS time, the Windows time will be automatically updated making "Time Limit" useless.

How can I prevent Windows 7 from reading the BIOS time?

Improve this question
7
  • 2
    How would it get its time?
    – soandos
    Aug 1, 2011 at 23:37
  • 7
    Don't like your kids using your computer after a good night out on the town? I hope that all you're using is the time restriction feature, and none of that privacy invading stuff.
    – Breakthrough
    Aug 2, 2011 at 0:46
  • 2
    soandos: Doesn’t Windows have the ability to use NTP servers?
    – Michael Trausch
    Aug 2, 2011 at 3:07
  • 1
    If your kids are smart enough to change the BIOS time then they are smart enough to get around any other restrictions you might place. How about you actually talk to them about the rules you've set and the consequences of breaking them, instead of just making them more annoying to break?
    – Sparr
    Aug 2, 2011 at 5:03
  • 3
    @Breakthrough privacy and parenting are two things which don't always go well together
    – Kos
    Aug 2, 2011 at 8:03

7 Answers 7

Reset to default
30

Rather than preventing it reading the BIOS time, the easiest option would be to set a BIOS password and not disclose it to anyone who might make any changes. While there are ways around that, my guess would be that your average family member isn't going to know how to do that.

Improve this answer
5
  • Thanx for the answer. This seems the best solution.
    – Serious
    Aug 2, 2011 at 7:15
  • Can the BIOS be written to from within Windows? I thought some tools could, or do those always need Admin access?
    – Konerak
    Aug 2, 2011 at 17:42
  • @Konerak In general, the answer is no. Some proprietary programs made by motherboard manufacturers may read the BIOS of that specific motherboard and may change some settings, but it's mostly limited to one particular motherboard series and available settings are usually related to overclocking.
    – AndrejaKo
    Aug 3, 2011 at 12:25
  • @AndrejaKo: Well motherboard manufacturer BIOS flashing programs which work within Windows are very common these days, and they would reset settings as well. However, the user would need admin access to use them.
    – paradroid
    Aug 9, 2011 at 16:33
  • Some BIOS don't protect time control behind the BIOS password. Interestingly enough.
    – music2myear
    Dec 9, 2016 at 20:18
16

Your operating system isn't running when the computer is turned off, so Windows has to read the hardware clock in order to get an accurate time. Otherwise, the Windows clock would "stop" every time you turned off your computer. Think of it with a metaphor: You can stand there counting "one-Mississippi two-Mississippi" etc to keep track of time, but if you fall asleep then when you wake up you'll need to look at a clock in order to know what time it is then, otherwise you'd just have to pick up from where you were before and you'd be off by the amount of time you were asleep.

Instead, you need to set a BIOS password to prevent people tampering with the BIOS time. Set an "Administration" password and that password will be necessary in order to change BIOS settings. The BIOS password can be reset by means of physically moving a jumper on the motherboard, this is one of the primary reasons that computer cases come with lock loops. If you really want to secure the machine, then you'll need to buy an inexpensive padlock and throw it through that loop.

Improve this answer
1
  • Thanks for an informative reply. I have not thought about that. Now I have realized preventing Windows from reading BIOS time is not a solution. I will cause more problems.
    – Serious
    Aug 2, 2011 at 7:19
9

You would need to secure the BIOS with a password. In addition, it is set through the clock applet in the Systray, of course. You need to protect both.

To prohibit changing this, you can open Control Panel>All Control Panel Items>Administrative Tools>Local Security Policy.

Then go to Local Policies>User Rights Assignment, and change the "Change the system time" right to only those users you want to have that right.

If They are administrators, they will be able to change this back if they are smart enough, so they technically cannot be administrators if you want this to work.

enter image description here

Improve this answer
3
  • Well the BIOS time is obviously called when the machine is started as well. so if it was changed they could still have access until the time is updated from the internet. The full solution would be to lock the BIOS setup with a password as well.
    – paradroid
    Aug 2, 2011 at 0:17
  • @paradroid You are correct, of course. I was thrown by my NTP resetting the time regardless of BIOS changes. I tested by turning off my wireless card, and then doing it, and clearly a BIOS call changed it. So clearly, he needs to protect both avenues of changing the clock.
    – KCotreau
    Aug 2, 2011 at 0:32
  • I was already using a limited account. Now I have set up BIOS password.
    – Serious
    Aug 2, 2011 at 7:30
1

If someone is savvy enough to change the BIOS time then they will probably get around any other restrictions you might place. Consider non-technological solutions.

[made more vague to satisfy moderators]

Improve this answer
0

Joining the computer to a domain can solve this - it will have the server time.

I think you can also install a NTP client for Windows, so it does not matter if they change the BIOS time as long as they are logging in as regular users.

The NTP should synchronize the time before the login if your restrictions apply to login.

Good luck!!

Improve this answer
1
  • 1
    He wants to run this in his home... setting up active directory in a home environment is not at all practical. Besides, NTP was already mentioned above as not a good solution because it won't sync if the time difference is too large.
    – nhinkle
    Aug 2, 2011 at 18:18
0

Not recommended: It was mentioned in a question about BIOS protection(maybe someone can find the question):

You can password protect your BIOS then epoxy it.

Some BIOS'es can still be reset through a short circuit but not as easily as pulling the battery out.

Improve this answer
3
  • Usually the reset jumper is right next to the battery and it will usually change time to default, which may or may not be helpful. Either way, it will remove the password. Also gluing the chip which is is a socket is extremely dangerous practice and for that idea, I give -1 vote. The BIOS chip is usually replaceable for a reason and glued chip could mean motherboard replacement is case of a bad flash.
    – AndrejaKo
    Aug 3, 2011 at 12:31
  • I don't recommend the solution! The jumpers can also be glued. There are scenarios in which this can be applied.
    – Dragos
    Aug 3, 2011 at 12:57
  • Then I'll remove the down-vote. Also if we're going in that direction, it would be much safer to remove jumpers and manually short contacts. That would be even more difficult to circumvent.
    – AndrejaKo
    Aug 3, 2011 at 14:23
0

Some people might have bios problems related to battery which indeed resets windows time, and is not synched with NTP Server.

Some might start windows with wrong bios time, and it takes certainly long time before windows realize what to do.

A service program that can run on Windows called time synch can be used, from where you can set time to synchroinze as low as each minute. As well half an hour or more.

Download: https://www.speed-soft.de/software/time_sync/details/download.php?language=en

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .