XP. Rigts to change power schema
Michael Enk
I have a lot of users on Windows XP Pro whom are only users on the
computers. These users needs to be able to change the power schema on the
computers, but they can not do this with their current priviledges. Is there
any way to change this behaviour on the computers so that users can make
this modification to the power schema ?
Thanks,
Michael
Curtis Clay III [MSFT]
Make them local administrators for thier machines or use the steps below...
WARNING: If you use Registry Editor incorrectly, you may cause serious
problems that may
require you to reinstall your operating system. Microsoft cannot guarantee
that you can solve
problems that result from using Registry Editor incorrectly. Use Registry
Editor at your own
risk.
1. Log on as Administrator.
2. Click Start , click Run, and then type "Regedt32" (without the
quotation marks).
3. Locate and click the following registry key:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ControlsFol
der\PowerCfg\GlobalPowerPolicy
On the Security menu, click Permissions. Either add the users separately,
or add the users' group and give all the users full control over this
key.
4. Locate and click the following registry key:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ControlsFol
der\PowerCfg\PowerPolicies
On the Security menu, click Permissions.
Either add the users separately, or add the user s' group and give all
the users full control over this key.
5. In addition, users need to be given the right to shut down the system.
To accomplish this, follow these steps:
a. In Control Panel, double-click Administrative Tools, and then
double-click "Local Security Policy".
b. In the left pane, expand Local Policies and click User Rights
Assignment.
c. In the right pane, double-click "Shut down the system", and add each
user individually or add the Users group to this local security policy.
Making these changes will allow normal users to alter power scheme settings
without being added to the Local Administrators group.
Note If users are running Windows 2000 Service Pack 3 (SP3), an
Administrator must also provide the users with the "Create Pagefile"
permission.
This posting is provided "AS IS" with no warranties, and confers no rights.
Kent W. England [MVP]
--
Kent W. England, Microsoft MVP for Windows Security
"Curtis Clay III [MSFT]" <cc...@online.microsoft.com> wrote in message
news:g3tZOtqs...@cpmsftngxa07.phx.gbl...
Curtis Clay III [MSFT]
Anything can be scripted. Have at it.
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/scriptcen
ter/default.asp
Torgeir Bakken (MVP)
> Can this procedure be scripted?
Yes.
You can use the IADsSecurityUtility interface to set registry permissions (from
e.g. a VBScript):
Retrieving, Setting, or Modifying Security Descriptors on File Systems, File
Shares, and Registry Keys
http://msdn.microsoft.com/library/en-us/netdir/adsi/retrieving_setting_or_modifying_security_descriptors_on_file_systems_file_shares_and_registry_keys.asp
but I think I would have used the builtin (WinXP) %windir%\system32\regini.exe
for this.
It is also an updated version of Regini.exe is in the Win2k3 Server Resource
Kit (for Win2k/WinXP as well), and for documentation, see rktools.chm in the
RK.
To add the "Shut down the system" right, you can do a call-out to the Win2k3
Server Resource Kit tool ntrights.exe (Win2k/WinXP/Win2k3):
ntrights.exe +r SeShutdownPrivilege -u <username/groupname>
How to Set Logon User Rights with the Ntrights.exe Utility
http://support.microsoft.com/?kbid=279664
How to: Determine NTRIGHTS Names and Meanings
http://support.microsoft.com/?kbid=245207
For more documentation on ntrights, see rktools.chm in the RK.
Windows Server 2003 Resource Kit Tools
http://www.microsoft.com/downloads/details.aspx?FamilyID=9d467a69-57ff-4ae7-96ee-b18c4790cffd&DisplayLang=en
(The kit will install on WinXP or later)
> "Curtis Clay III [MSFT]" <cc...@online.microsoft.com> wrote in message
> news:g3tZOtqs...@cpmsftngxa07.phx.gbl...
> >
> >
> > 1. Log on as Administrator.
> >
> > 2. Click Start , click Run, and then type "Regedt32" (without the
> > quotation marks).
> >
> > 3. Locate and click the following registry key:
> >
> > HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\
> > CurrentVersion\ControlsFolder\PowerCfg\GlobalPowerPolicy
> >
> >
> > On the Security menu, click Permissions. Either add the users
> > separately, or add the users' group and give all the users full
> > control over this key.
> >
> > 4. Locate and click the following registry key:
> >
> >
> > HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\
> > CurrentVersion\ControlsFolder\PowerCfg\PowerPolicies
> >
> > On the Security menu, click Permissions.
> > Either add the users separately, or add the user s' group and give
> > all the users full control over this key.
> >
> > 5. In addition, users need to be given the right to shut down the
> > system.
> >
> > To accomplish this, follow these steps:
> >
> > a. In Control Panel, double-click Administrative Tools, and then
> > double-click "Local Security Policy".
> >
> > b. In the left pane, expand Local Policies and click User Rights
> > Assignment.
> >
> >
> > c. In the right pane, double-click "Shut down the system", and add
> > each user individually or add the Users group to this local security
> > policy.
> >
> > Making these changes will allow normal users to alter power scheme
> > settings without being added to the Local Administrators group.
> >
> > Note If users are running Windows 2000 Service Pack 3 (SP3), an
> > Administrator must also provide the users with the "Create Pagefile"
> > permission.
--
torgeir
Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of the 1328 page
Scripting Guide: http://www.microsoft.com/technet/scriptcenter
Kent W. England [MVP]
the lead. It's pretty annoying to have to create .reg files using one
syntax, .ini files using another syntax, and regini scripts with another
syntax.
--
Kent W. England, Microsoft MVP for Windows Security
"Torgeir Bakken (MVP)" <Torgeir.B...@hydro.com> wrote in message
news:3FC3BD27...@hydro.com...
> "Kent W. England [MVP]" wrote:
>
> > Can this procedure be scripted?
>
> Yes.
>
>
>
aaronbla...@gmail.com
All Users - Edit Power Settings.cmd >>
regini AllUsersEditPower.config
AllUsersEditPower.config >>
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Power [1 7]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Controls Folder\PowerCfg [1 7]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Controls Folder\PowerCfg\GlobalPowerPolicy [1 7]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Controls Folder\PowerCfg\PowerPolicies [1 7]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Controls Folder\PowerCfg\PowerPolicies\0 [1 7]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Controls Folder\PowerCfg\PowerPolicies\1 [1 7]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Controls Folder\PowerCfg\PowerPolicies\2 [1 7]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Controls Folder\PowerCfg\PowerPolicies\3 [1 7]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Controls Folder\PowerCfg\PowerPolicies\4 [1 7]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Controls Folder\PowerCfg\PowerPolicies\5 [1 7]