We help IT Professionals succeed at work.

Need to allow restricted users access to Power management and Date/time settings

Where in AD Group policy settings that can allow a restricted user on an XP machine access to change the power settings of the system.  Is this even possible via group policy?  If not, I have found a script that changes the power settings.  However, this script does not change the settings when run under the users profile with the restricted access.  I would prefer to grant each user access to their power options instead of changing them all to the same since each invidual has their own preferences.  Any assistance is greatly appreciated.  (All of the systems are XP and all servers are Server 2003 SP2)
Comment
Watch Question

This can be done by making a registry change

http://support.microsoft.com/kb/300022
CERTIFIED EXPERT

Commented:
This is not possible in Windows XP. You would have to assign the users at least Power Users rights on the client system.

There is a program available for setting power management features, but this may not be what you are looking for.

http://www.energystar.gov/index.cfm?c=power_mgt.pr_power_mgt_ez_gpo
this is how you can run a script under user (without admin rights)
http://www.microsoft.com/technet/scriptcenter/resources/qanda/apr06/hey0428.mspx
CERTIFIED EXPERT

Commented:
I do believe you can set this through GPO on a Vista system in a 2008 domain... but not on XP per your question.

(I cant believe this isnt a builtin option! It has frustrated me for the past few years.)
CERTIFIED EXPERT
Commented:
This is something that you cannot delegate using any GPO I am aware of.

Power Management is controlled in the registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Controls Folder\PowerCfg

You should be able to use a GPO to set permissions on this registry key:

Policy
> Computer Configuration
>> Widows Settings
>>> Security Settings
>>>> Registry

Grant 'INTERACTIVE' the 'Set Value' and 'Create SubKey' rights on the  GlobalPowerPolicy and PowerPolicies keys.
CERTIFIED EXPERT

Commented:
Note:  If you don't want *all* users on the system to be able to manage power settings you can simply replace INTERACTIVE with the name/group you want to give access to.
CERTIFIED EXPERT

Commented:
Clarification: "This is something that you cannot delegate using any GPO I am aware of."
I meant that there is no administrative template that allows you to delegate this right.  

@smckellar83: I didn't realise you could do this!

In that case if the rights to "Change system time" can be modified using the registy key:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\TimeZoneInformation

You should be able to use a GPO to set permissions on this registry key:

Policy
> Computer Configuration
>> Widows Settings
>>> Security Settings
>>>> Registry

Grant 'INTERACTIVE' the following rights on the key:
"      Query Value
"      Set Value
"      Create Subkey
"      Enumerate Subkey
"      Notify
"      Read Control

Again if you don't want all users to have this right replace INTERACTIVE with the user/group name(s).

Author

Commented:
I would like to avoid editing the registry.  I didn't think there was an option via group policy. (it is frustrating)   As for running the script, it will run without any access denied messages, it just doesn't change the power settings.   I will read the info provided from smckellar83 and see if I can get the options to change.  Thank you all for your suggestions.
CERTIFIED EXPERT

Commented:
The settings you are after are in the registry - if there was an administrative template that allowed you to grant access this is how it'd do it.  :)

Author

Commented:
Thank you this was successful through GP.

Commented:
This worked for me.  I created a .bat file with  lie line   powercfg /s "always on"   in it, then set it as a user login script and a computer startup script in Group Policy.  Had to hack the registry as stated in the accepted solution above to allow domain users perms to change power settings (if this is not done, users will not be able to set the power options, and will get a default power scheme).

Explore More ContentExplore courses, solutions, and other research materials related to this topic.