Solved

Allow non local admin users to change power options

Posted on 2010-09-22
6
1,251 Views
Last Modified: 2012-06-21
I need to be able to allow users who do not have local admin rights to be able to change their power options on the XP machine.
Does any know of a GPO I can create for this?
DC is W2K3
0
Comment
Question by:tolinrome
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
6 Comments
 
LVL 5

Expert Comment

by:mooodiecr
ID: 33735166
Option 1:
The only way I have been able to do this, is to change permissions on a registry key.
    *  Run Regedit.exe as an administrator
    * Browse to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Controls Folder\PowerCfg
    * Right-click on the “GlobalPowerPolicy” key and choose “Permissions”.
    * Click on the “Advanced” button.
    * Click “Add”.
    * Type INTERACTIVE and click “Check names”, then OK.
    * Check the “Set value” and “Create Subkey” checkboxes in the “Allow” column, and click OK, then OK, then OK.
    * Do the same thing with the “PowerPolicies” key.

I know this was found on a website but I just saved the "how to" and seemed to work great for us.  If this is for several users you can script a permission change using this article:
http://support.microsoft.com/kb/264584

Option 2:
You can also create a security Template to allow permissions to the registry file in Group Policy.  
Open up Group Policy Editor and browse to Computer Configuration -> Windows Settings -> Registry
Then right click in the right hand pane and choose new key.  Browse to the keys noted above and add the correct permissions.


0
 
LVL 7

Author Comment

by:tolinrome
ID: 33735613
Wouldn't it be possible to make the changes to those registry keys on a client then export them and then push it out via GPO?

I need to do this on many machines and doing it manually or having any user interaction is out of the question.
0
 
LVL 5

Accepted Solution

by:
mooodiecr earned 250 total points
ID: 33735800
Since there are so many of them the best way would be option 2 mentioned above.

"You can also create a security Template to allow permissions to the registry file in Group Policy.  
Open up Group Policy Editor and browse to Computer Configuration -> Windows Settings -> Registry
Then right click in the right hand pane and choose new key.  Browse to the keys noted above and add the correct permissions."

You can link this at the Top of the domain and all the users would receive the proper registry permissions.
0
Secure Your WordPress Site: 5 Essential Approaches

WordPress is the web's most popular CMS, but its dominance also makes it a target for attackers. Our eBook will show you how to:

Prevent costly exploits of core and plugin vulnerabilities
Repel automated attacks
Lock down your dashboard, secure your code, and protect your users

 
LVL 7

Author Comment

by:tolinrome
ID: 33735967
Ok,that sounds better.
I just followed your suggestion on GPED on the DC and after I set the permissions I'm prompted with a box "Security policy Setting"

Radio Button options are:
1. Propagate inheritable permissions to all subkeys
2. Replace existing permissions on all subkeys with inheritable permissions
3. Do not allow permissions on this key to be replaced.

I'm assuming that I should choose the second choice?
I only want them to have the ability to change the power options.
0
 
LVL 5

Expert Comment

by:mooodiecr
ID: 33736923
Option 1 or 2 should be fine.  The only thing you might want to be aware of is that if you do choose option 2 it will replace any permissions that an application installed by an admin have put on those keys.  Since it is a power management, I would assume that this would not be the case.  However, if it were those permissions would be removed with whatever you have put on the parent key.  

Just something to consider.
0
 
LVL 7

Author Closing Comment

by:tolinrome
ID: 33738707
Worked great, thanks.
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Active Directory security has been a hot topic of late, and for good reason. With 90% of the world’s organization using this system to manage access to all parts of their IT infrastructure, knowing how to protect against threats and keep vulnerabil…
A hard and fast method for reducing Active Directory Administrators members.
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

738 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question