• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 3073
  • Last Modified:

Need to allow restricted users access to Power management and Date/time settings

Where in AD Group policy settings that can allow a restricted user on an XP machine access to change the power settings of the system.  Is this even possible via group policy?  If not, I have found a script that changes the power settings.  However, this script does not change the settings when run under the users profile with the restricted access.  I would prefer to grant each user access to their power options instead of changing them all to the same since each invidual has their own preferences.  Any assistance is greatly appreciated.  (All of the systems are XP and all servers are Server 2003 SP2)
0
valf_47
Asked:
valf_47
  • 4
  • 2
  • 2
  • +2
1 Solution
 
smckellar83Commented:
This can be done by making a registry change

http://support.microsoft.com/kb/300022
0
 
brent_caskeyCommented:
This is not possible in Windows XP. You would have to assign the users at least Power Users rights on the client system.

There is a program available for setting power management features, but this may not be what you are looking for.

http://www.energystar.gov/index.cfm?c=power_mgt.pr_power_mgt_ez_gpo
0
 
smckellar83Commented:
this is how you can run a script under user (without admin rights)
http://www.microsoft.com/technet/scriptcenter/resources/qanda/apr06/hey0428.mspx
0
The new generation of project management tools

With monday.com’s project management tool, you can see what everyone on your team is working in a single glance. Its intuitive dashboards are customizable, so you can create systems that work for you.

 
brent_caskeyCommented:
I do believe you can set this through GPO on a Vista system in a 2008 domain... but not on XP per your question.

(I cant believe this isnt a builtin option! It has frustrated me for the past few years.)
0
 
lamaslanyCommented:
This is something that you cannot delegate using any GPO I am aware of.

Power Management is controlled in the registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Controls Folder\PowerCfg

You should be able to use a GPO to set permissions on this registry key:

Policy
> Computer Configuration
>> Widows Settings
>>> Security Settings
>>>> Registry

Grant 'INTERACTIVE' the 'Set Value' and 'Create SubKey' rights on the  GlobalPowerPolicy and PowerPolicies keys.
0
 
lamaslanyCommented:
Note:  If you don't want *all* users on the system to be able to manage power settings you can simply replace INTERACTIVE with the name/group you want to give access to.
0
 
lamaslanyCommented:
Clarification: "This is something that you cannot delegate using any GPO I am aware of."
I meant that there is no administrative template that allows you to delegate this right.  

@smckellar83: I didn't realise you could do this!

In that case if the rights to "Change system time" can be modified using the registy key:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\TimeZoneInformation

You should be able to use a GPO to set permissions on this registry key:

Policy
> Computer Configuration
>> Widows Settings
>>> Security Settings
>>>> Registry

Grant 'INTERACTIVE' the following rights on the key:
"      Query Value
"      Set Value
"      Create Subkey
"      Enumerate Subkey
"      Notify
"      Read Control

Again if you don't want all users to have this right replace INTERACTIVE with the user/group name(s).
0
 
valf_47Author Commented:
I would like to avoid editing the registry.  I didn't think there was an option via group policy. (it is frustrating)   As for running the script, it will run without any access denied messages, it just doesn't change the power settings.   I will read the info provided from smckellar83 and see if I can get the options to change.  Thank you all for your suggestions.
0
 
lamaslanyCommented:
The settings you are after are in the registry - if there was an administrative template that allowed you to grant access this is how it'd do it.  :)
0
 
valf_47Author Commented:
Thank you this was successful through GP.
0
 
timdowCommented:
This worked for me.  I created a .bat file with  lie line   powercfg /s "always on"   in it, then set it as a user login script and a computer startup script in Group Policy.  Had to hack the registry as stated in the accepted solution above to allow domain users perms to change power settings (if this is not done, users will not be able to set the power options, and will get a default power scheme).
0

Featured Post

Easily manage email signatures in Office 365

Managing email signatures in Office 365 can be a challenging task if you don't have the right tool. CodeTwo Email Signatures for Office 365 will help you implement a unified email signature look, no matter what email client is used by users. Test it for free!

  • 4
  • 2
  • 2
  • +2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now