Jenny Coulthard
asked on
Grant user permissions to powercfg registry keys, not working
I am using the powercfg to change power settings via group policy on windows xp machines. I followed instruction in article how to use powercfg.exe to creatge a group policy for power schemes in windows xp http://support.microsoft.com/kb/915160/en-us. The login script runS but only has required permissions if I manually give users full permissions to the registry keys MACHINE\SOFTWARE\Microsoft \Windows\C urrentVers ion\Contro ls Folder\PowerCfg
USERS\.DEFAULT\Control Panel\PowerCfg
I have setup a gp to do this but doesnt appear to be working. I logged on more than once with no success.
It would appear that I have another overriding policy which I cant find as even when logged on as administrator I could not change the permissions on the registry key. I could only change by logging on as the local administrator.
It is not a huge issue as I can manually go to each PC and change registry settings it just isnt very good long term.
Any suggestions?
USERS\.DEFAULT\Control Panel\PowerCfg
I have setup a gp to do this but doesnt appear to be working. I logged on more than once with no success.
It would appear that I have another overriding policy which I cant find as even when logged on as administrator I could not change the permissions on the registry key. I could only change by logging on as the local administrator.
It is not a huge issue as I can manually go to each PC and change registry settings it just isnt very good long term.
Any suggestions?
Did you do all the steps in the in the guide? Specifically steps 16-23? Step 18 indicates to grant this to a user's name, but you can also change this to a group that has all the users that you want to be able to modify the power schemes. If you want all users, you might want to set this to Authenticates Users or Domain Users.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thanks Pber & Awinish, have been away over christmas - I did not get back here on 24th (so apologies for not replying). I will double check that I did all steps 16 - 23, I tried to use a group rather than an individual user at step 18 but it didnt appear to recognise the group.
On one of the workstations I ran gpresult and the policy is being applied shown under user configuration (which is wehre i stored). Using RSOP.MSC the User Configuration component -> logon script, powerconfig.bat is set but none of the Computer Configuration is set -> Windows Settings, Security Settings, Local Policies, User Rights Assignment.
Looking at Pber's second comment I checked the Group Policies, All our computer configs policies only contain computer settings but our User Configuration policies are a mixture of both. I will create another OU under computers and apply policy to that to see what difference this makes.
On one of the workstations I ran gpresult and the policy is being applied shown under user configuration (which is wehre i stored). Using RSOP.MSC the User Configuration component -> logon script, powerconfig.bat is set but none of the Computer Configuration is set -> Windows Settings, Security Settings, Local Policies, User Rights Assignment.
Looking at Pber's second comment I checked the Group Policies, All our computer configs policies only contain computer settings but our User Configuration policies are a mixture of both. I will create another OU under computers and apply policy to that to see what difference this makes.
ASKER
I split the GPO into two parts, one with the User settings and applied that to the OU containing users, then put the Computer settings in another GPO that is applied to the OU containing Computers. Using RSOP and gpresult on the workstation able to determine that it all now works. Will split points between both as used info from both to get working. Thanks
ASKER
thanks