What if you want to prevent users from going to File > Tools > Session date and time in Dynamics AX 2012 and changing the session date?

Usually, every user has access to the form, because the permission is included in System User role. If you go deeper, you’ll find SystemDate entry point in ClientEssentials privilege, which is included in SysServerAXBasicMaintain duty and this duty is assigned to System User role.

Therefore you can simply remove SystemDate entry point from ClientEssentials privilege and assign it only to the privilege/duty/role where you want it.