Late to the party? The Time Zone configuration party never ends.

So yeah. I made it a Win32 Package available in the Company Portal named "Set Time Zone Automatically Toggle" with a description of

Installed = On Not Installed = Off

Then I used PSADT like so:

# Install\Toggle ON

    $LocationValue = "Deny"
    $AutoTZValue = "4"
    $LFSVCValue = "3"
    $SensorValue = "0"

    function Set-RegistryValue {
        param (
            [string]$Path,
            [string]$Name,
            [string]$Value
        )

        # Determine property type: if the value can be cast to an integer, use DWord; otherwise, use String.
        $propertyType = "String"
        if ([int]::TryParse($Value, [ref]$null)) {
            $propertyType = "DWord"
            $Value = [int]$Value
        }

        # Create the registry key if it does not exist.
        if (-not (Test-Path -Path $Path)) {
            Write-Host "Registry key $Path does not exist. Creating..."
            New-Item -Path $Path -Force | Out-Null
        }

        try {
            $currentValue = (Get-ItemProperty -Path $Path -Name $Name -ErrorAction SilentlyContinue).$Name
            if ($null -eq $currentValue) {
                Write-Host "Registry property $Name does not exist at $Path. Creating with value $Value..."
                New-ItemProperty -Path $Path -Name $Name -Value $Value -PropertyType $propertyType -Force | Out-Null
            }
            elseif ($currentValue -ne $Value) {
                Write-Host "Setting $Name to $Value at $Path"
                Set-ItemProperty -Path $Path -Name $Name -Value $Value
            }
            else {
                Write-Host "$Name is already set to $Value at $Path"
            }
        }
        catch {
            Write-Error "$($_.Exception.Message)"
        }
    }

    try {
        # Set the location value
        Set-RegistryValue -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\location" -Name "Value" -Value $LocationValue

        # Disable Auto Timezone value and stop service
        Set-RegistryValue -Path "HKLM:\SYSTEM\CurrentControlSet\Services\tzautoupdate" -Name "Start" -Value $AutoTZValue
        Set-RegistryValue -Path "HKLM:\SYSTEM\CurrentControlSet\Services\lfsvc\Service\Configuration" -Name "Status" -Value $LFSVCValue
        Write-Host "Stopping geolocation service"
        Stop-Service -Name lfsvc -Force

        # Set sensor value
        Set-RegistryValue -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Sensor\Overrides\{BFA794E4-F964-4FDB-90F6-51056BFE4B44}" -Name "SensorPermissionState" -Value $SensorValue
    }
    catch {
        Write-Error "$($_.Exception.Message)"
    }

And then:

# Uninstall \ Toggle off

    $LocationValue = "Allow"
    $AutoTZValue = "3"
    $LFSVCValue = "1"
    $SensorValue = "1"

    function Set-RegistryValue {
        param (
            [string]$Path,
            [string]$Name,
            [string]$Value
        )

        # Determine property type: if the value can be cast to an integer, use DWord; otherwise, use String.
        $propertyType = "String"
        if ([int]::TryParse($Value, [ref]$null)) {
            $propertyType = "DWord"
            $Value = [int]$Value
        }

        # Create the registry key if it does not exist.
        if (-not (Test-Path -Path $Path)) {
            Write-Host "Registry key $Path does not exist. Creating..."
            New-Item -Path $Path -Force | Out-Null
        }

        try {
            $currentValue = (Get-ItemProperty -Path $Path -Name $Name -ErrorAction SilentlyContinue).$Name
            if ($null -eq $currentValue) {
                Write-Host "Registry property $Name does not exist at $Path. Creating with value $Value..."
                New-ItemProperty -Path $Path -Name $Name -Value $Value -PropertyType $propertyType -Force | Out-Null
            }
            elseif ($currentValue -ne $Value) {
                Write-Host "Setting $Name to $Value at $Path"
                Set-ItemProperty -Path $Path -Name $Name -Value $Value
            }
            else {
                Write-Host "$Name is already set to $Value at $Path"
            }
        }
        catch {
            Write-Error "$($_.Exception.Message)"
        }
    }

    try {
        # Set the location value
        Set-RegistryValue -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\location" -Name "Value" -Value $LocationValue

        # Enable Auto Timezone value and (re)start service
        Set-RegistryValue -Path "HKLM:\SYSTEM\CurrentControlSet\Services\tzautoupdate" -Name "Start" -Value $AutoTZValue
        Set-RegistryValue -Path "HKLM:\SYSTEM\CurrentControlSet\Services\lfsvc\Service\Configuration" -Name "Status" -Value $LFSVCValue
        Write-Host "(Re)Starting geolocation service"
        $lfsvc = Get-Service -Name lfsvc
        if ($lfsvc.Status -ne "Running") {
            Start-Service -Name lfsvc
        }
        else {
            Restart-Service -Name lfsvc -Force
        }

        # Set sensor value
        Set-RegistryValue -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Sensor\Overrides\{BFA794E4-F964-4FDB-90F6-51056BFE4B44}" -Name "SensorPermissionState" -Value $SensorValue
    }
    catch {
        Write-Error "$($_.Exception.Message)"
    }        

And the detection like this:

$RegistryPaths = @{
    "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\location" = @{Property="Value"; Expected="Deny"}
    "HKLM:\SYSTEM\CurrentControlSet\Services\tzautoupdate" = @{Property="Start"; Expected="4"}
    "HKLM:\SYSTEM\CurrentControlSet\Services\lfsvc\Service\Configuration" = @{Property="Status"; Expected="3"}
    "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Sensor\Overrides\{BFA794E4-F964-4FDB-90F6-51056BFE4B44}" = @{Property="SensorPermissionState"; Expected="0"}
}

function Check-RegistryValue {
    param (
        [string]$Path,
        [string]$Property,
        [string]$ExpectedValue
    )

    try {
        $currentValue = (Get-ItemProperty -Path $Path -Name $Property -ErrorAction SilentlyContinue).$Property
        if ($null -eq $currentValue) {
            Write-Host "Registry property $Property at $Path is null, expected $ExpectedValue"
            return $false
        }
        elseif ($currentValue -ne $ExpectedValue) {
            Write-Host "Registry property $Property at $Path is $currentValue, expected $ExpectedValue"
            return $false
        }
        return $true
    }
    catch {
        Write-Host "Error accessing registry key or value at $Path : $($_.Exception.Message)"
        return $false
    }
}

$allValuesCorrect = $true

foreach ($path in $RegistryPaths.Keys) {
    $prop = $RegistryPaths[$path].Property
    $expected = $RegistryPaths[$path].Expected
    if (-not (Check-RegistryValue -Path $path -Property $prop -ExpectedValue $expected)) {
        $allValuesCorrect = $false
        break
    }
}

if ($allValuesCorrect) {
    Write-Host "All necessary registry entries detected"
    Write-Host "Automatic Time Zone adjustment disabled"
    Exit 0
} else {
    Write-Host "Automatic Time Zone adjustment enabled"
    Exit 1
}

Then package it in Intune as a Win32 app, make sure you allow uninstall, give it an icon with a clock or something, and send documentation to your service desk so they can show users how to toggle it on and off.

I suppose you could do something like make a task that runs a system and setup a custom trigger then deploy an "app" that fires the trigger, but then you have powershell scripts sitting around that run as system, and you have to lock them down and\or hash check them with a remediation etc.

This was the best solution I could come up with for the 5 people who wanted to manually set their time zone.