Solved

Allow non local admin users to change power options

Posted on 2010-09-22
6
1,222 Views
Last Modified: 2012-06-21
I need to be able to allow users who do not have local admin rights to be able to change their power options on the XP machine.
Does any know of a GPO I can create for this?
DC is W2K3
0
Comment
Question by:tolinrome
  • 3
  • 3
6 Comments
 
LVL 5

Expert Comment

by:mooodiecr
ID: 33735166
Option 1:
The only way I have been able to do this, is to change permissions on a registry key.
    *  Run Regedit.exe as an administrator
    * Browse to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Controls Folder\PowerCfg
    * Right-click on the “GlobalPowerPolicy” key and choose “Permissions”.
    * Click on the “Advanced” button.
    * Click “Add”.
    * Type INTERACTIVE and click “Check names”, then OK.
    * Check the “Set value” and “Create Subkey” checkboxes in the “Allow” column, and click OK, then OK, then OK.
    * Do the same thing with the “PowerPolicies” key.

I know this was found on a website but I just saved the "how to" and seemed to work great for us.  If this is for several users you can script a permission change using this article:
http://support.microsoft.com/kb/264584

Option 2:
You can also create a security Template to allow permissions to the registry file in Group Policy.  
Open up Group Policy Editor and browse to Computer Configuration -> Windows Settings -> Registry
Then right click in the right hand pane and choose new key.  Browse to the keys noted above and add the correct permissions.


0
 
LVL 7

Author Comment

by:tolinrome
ID: 33735613
Wouldn't it be possible to make the changes to those registry keys on a client then export them and then push it out via GPO?

I need to do this on many machines and doing it manually or having any user interaction is out of the question.
0
 
LVL 5

Accepted Solution

by:
mooodiecr earned 250 total points
ID: 33735800
Since there are so many of them the best way would be option 2 mentioned above.

"You can also create a security Template to allow permissions to the registry file in Group Policy.  
Open up Group Policy Editor and browse to Computer Configuration -> Windows Settings -> Registry
Then right click in the right hand pane and choose new key.  Browse to the keys noted above and add the correct permissions."

You can link this at the Top of the domain and all the users would receive the proper registry permissions.
0
NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

 
LVL 7

Author Comment

by:tolinrome
ID: 33735967
Ok,that sounds better.
I just followed your suggestion on GPED on the DC and after I set the permissions I'm prompted with a box "Security policy Setting"

Radio Button options are:
1. Propagate inheritable permissions to all subkeys
2. Replace existing permissions on all subkeys with inheritable permissions
3. Do not allow permissions on this key to be replaced.

I'm assuming that I should choose the second choice?
I only want them to have the ability to change the power options.
0
 
LVL 5

Expert Comment

by:mooodiecr
ID: 33736923
Option 1 or 2 should be fine.  The only thing you might want to be aware of is that if you do choose option 2 it will replace any permissions that an application installed by an admin have put on those keys.  Since it is a power management, I would assume that this would not be the case.  However, if it were those permissions would be removed with whatever you have put on the parent key.  

Just something to consider.
0
 
LVL 7

Author Closing Comment

by:tolinrome
ID: 33738707
Worked great, thanks.
0

Featured Post

U.S. Department of Agriculture and Acronis Access

With the new era of mobile computing, smartphones and tablets, wireless communications and cloud services, the USDA sought to take advantage of a mobilized workforce and the blurring lines between personal and corporate computing resources.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When it comes to security, there are always trade-offs between security and convenience/ease of administration. This article examines some of the main pros and cons of using key authentication vs password authentication for hosting an SFTP server.
When you try to share a printer , you may receive one of the following error messages. Error message when you use the Add Printer Wizard to share a printer: Windows could not share your printer. Operation could not be completed (Error 0x000006…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question