And now to answer the original question, you can create a group policy that allows only specific users or groups to change system time. It's also much easier to control the clock if you use a central time source which is used to sync all computers. Every commercial or Government network of any size uses a central time source for time synchronization.