Looking at control windows-019 i noticed this is using: SeSystemtimePrivilege and not: SeTimeZonePrivilege https://github.com/dev-sec/windows-baseline/blob/82fc617a0c482846c4cc3b96a0b5f03b60a2c6f8/controls/local_policies.rb#L222 https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/user-rights-assignment