Need to allow restricted users access to Power management and Date/time settings

Where in AD Group policy settings that can allow a restricted user on an XP machine access to change the power settings of the system.  Is this even possible via group policy?  If not, I have found a script that changes the power settings.  However, this script does not change the settings when run under the users profile with the restricted access.  I would prefer to grant each user access to their power options instead of changing them all to the same since each invidual has their own preferences.  Any assistance is greatly appreciated.  (All of the systems are XP and all servers are Server 2003 SP2)
valf_47Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

smckellar83Commented:
This can be done by making a registry change

http://support.microsoft.com/kb/300022
0
brent_caskeyCommented:
This is not possible in Windows XP. You would have to assign the users at least Power Users rights on the client system.

There is a program available for setting power management features, but this may not be what you are looking for.

http://www.energystar.gov/index.cfm?c=power_mgt.pr_power_mgt_ez_gpo
0
smckellar83Commented:
this is how you can run a script under user (without admin rights)
http://www.microsoft.com/technet/scriptcenter/resources/qanda/apr06/hey0428.mspx
0
The Ultimate Tool Kit for Technolgy Solution Provi

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy for valuable how-to assets including sample agreements, checklists, flowcharts, and more!

brent_caskeyCommented:
I do believe you can set this through GPO on a Vista system in a 2008 domain... but not on XP per your question.

(I cant believe this isnt a builtin option! It has frustrated me for the past few years.)
0
lamaslanyCommented:
This is something that you cannot delegate using any GPO I am aware of.

Power Management is controlled in the registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Controls Folder\PowerCfg

You should be able to use a GPO to set permissions on this registry key:

Policy
> Computer Configuration
>> Widows Settings
>>> Security Settings
>>>> Registry

Grant 'INTERACTIVE' the 'Set Value' and 'Create SubKey' rights on the  GlobalPowerPolicy and PowerPolicies keys.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
lamaslanyCommented:
Note:  If you don't want *all* users on the system to be able to manage power settings you can simply replace INTERACTIVE with the name/group you want to give access to.
0
lamaslanyCommented:
Clarification: "This is something that you cannot delegate using any GPO I am aware of."
I meant that there is no administrative template that allows you to delegate this right.  

@smckellar83: I didn't realise you could do this!

In that case if the rights to "Change system time" can be modified using the registy key:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\TimeZoneInformation

You should be able to use a GPO to set permissions on this registry key:

Policy
> Computer Configuration
>> Widows Settings
>>> Security Settings
>>>> Registry

Grant 'INTERACTIVE' the following rights on the key:
"      Query Value
"      Set Value
"      Create Subkey
"      Enumerate Subkey
"      Notify
"      Read Control

Again if you don't want all users to have this right replace INTERACTIVE with the user/group name(s).
0
valf_47Author Commented:
I would like to avoid editing the registry.  I didn't think there was an option via group policy. (it is frustrating)   As for running the script, it will run without any access denied messages, it just doesn't change the power settings.   I will read the info provided from smckellar83 and see if I can get the options to change.  Thank you all for your suggestions.
0
lamaslanyCommented:
The settings you are after are in the registry - if there was an administrative template that allowed you to grant access this is how it'd do it.  :)
0
valf_47Author Commented:
Thank you this was successful through GP.
0
timdowCommented:
This worked for me.  I created a .bat file with  lie line   powercfg /s "always on"   in it, then set it as a user login script and a computer startup script in Group Policy.  Had to hack the registry as stated in the accepted solution above to allow domain users perms to change power settings (if this is not done, users will not be able to set the power options, and will get a default power scheme).
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Laptops Notebooks

From novice to tech pro — start learning today.