Solved

Allow non local admin users to change power options

Posted on 2010-09-22
6
1,198 Views
Last Modified: 2012-06-21
I need to be able to allow users who do not have local admin rights to be able to change their power options on the XP machine.
Does any know of a GPO I can create for this?
DC is W2K3
0
Comment
Question by:tolinrome
  • 3
  • 3
6 Comments
 
LVL 5

Expert Comment

by:mooodiecr
ID: 33735166
Option 1:
The only way I have been able to do this, is to change permissions on a registry key.
    *  Run Regedit.exe as an administrator
    * Browse to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Controls Folder\PowerCfg
    * Right-click on the “GlobalPowerPolicy” key and choose “Permissions”.
    * Click on the “Advanced” button.
    * Click “Add”.
    * Type INTERACTIVE and click “Check names”, then OK.
    * Check the “Set value” and “Create Subkey” checkboxes in the “Allow” column, and click OK, then OK, then OK.
    * Do the same thing with the “PowerPolicies” key.

I know this was found on a website but I just saved the "how to" and seemed to work great for us.  If this is for several users you can script a permission change using this article:
http://support.microsoft.com/kb/264584

Option 2:
You can also create a security Template to allow permissions to the registry file in Group Policy.  
Open up Group Policy Editor and browse to Computer Configuration -> Windows Settings -> Registry
Then right click in the right hand pane and choose new key.  Browse to the keys noted above and add the correct permissions.


0
 
LVL 7

Author Comment

by:tolinrome
ID: 33735613
Wouldn't it be possible to make the changes to those registry keys on a client then export them and then push it out via GPO?

I need to do this on many machines and doing it manually or having any user interaction is out of the question.
0
 
LVL 5

Accepted Solution

by:
mooodiecr earned 250 total points
ID: 33735800
Since there are so many of them the best way would be option 2 mentioned above.

"You can also create a security Template to allow permissions to the registry file in Group Policy.  
Open up Group Policy Editor and browse to Computer Configuration -> Windows Settings -> Registry
Then right click in the right hand pane and choose new key.  Browse to the keys noted above and add the correct permissions."

You can link this at the Top of the domain and all the users would receive the proper registry permissions.
0
What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

 
LVL 7

Author Comment

by:tolinrome
ID: 33735967
Ok,that sounds better.
I just followed your suggestion on GPED on the DC and after I set the permissions I'm prompted with a box "Security policy Setting"

Radio Button options are:
1. Propagate inheritable permissions to all subkeys
2. Replace existing permissions on all subkeys with inheritable permissions
3. Do not allow permissions on this key to be replaced.

I'm assuming that I should choose the second choice?
I only want them to have the ability to change the power options.
0
 
LVL 5

Expert Comment

by:mooodiecr
ID: 33736923
Option 1 or 2 should be fine.  The only thing you might want to be aware of is that if you do choose option 2 it will replace any permissions that an application installed by an admin have put on those keys.  Since it is a power management, I would assume that this would not be the case.  However, if it were those permissions would be removed with whatever you have put on the parent key.  

Just something to consider.
0
 
LVL 7

Author Closing Comment

by:tolinrome
ID: 33738707
Worked great, thanks.
0

Featured Post

6 Surprising Benefits of Threat Intelligence

All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

Join & Write a Comment

#Citrix #Citrix Netscaler #HTTP Compression #Load Balance
This is an article about my experiences with remote access to my clients (so that I may serve them) and eventually to my home office system via Radmin Remote Control. I have been using remote access for over 10 years and have been improving my metho…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now