XP. Rigts to change power schema

[Michael Enk]

Hi,

I have a lot of users on Windows XP Pro whom are only users on the
computers. These users needs to be able to change the power schema on the
computers, but they can not do this with their current priviledges. Is there
any way to change this behaviour on the computers so that users can make
this modification to the power schema ?

Thanks,
Michael

 

[Curtis Clay III [MSFT]]

Hello Michael,
Make them local administrators for thier machines or use the steps below...

WARNING: If you use Registry Editor incorrectly, you may cause serious
problems that may
require you to reinstall your operating system. Microsoft cannot guarantee
that you can solve
problems that result from using Registry Editor incorrectly. Use Registry
Editor at your own
risk.


1. Log on as Administrator.

2. Click Start , click Run, and then type "Regedt32" (without the
quotation marks).

3. Locate and click the following registry key:



HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ControlsFol
der\PowerCfg\GlobalPowerPolicy



On the Security menu, click Permissions. Either add the users separately,
or add the users' group and give all the users full control over this
key.

4. Locate and click the following registry key:



HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ControlsFol
der\PowerCfg\PowerPolicies

On the Security menu, click Permissions.
Either add the users separately, or add the user s' group and give all
the users full control over this key.

5. In addition, users need to be given the right to shut down the system.
To accomplish this, follow these steps:

a. In Control Panel, double-click Administrative Tools, and then
double-click "Local Security Policy".

b. In the left pane, expand Local Policies and click User Rights
Assignment.


c. In the right pane, double-click "Shut down the system", and add each
user individually or add the Users group to this local security policy.
Making these changes will allow normal users to alter power scheme settings
without being added to the Local Administrators group.

Note If users are running Windows 2000 Service Pack 3 (SP3), an
Administrator must also provide the users with the "Create Pagefile"
permission.



This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Kent W. England [MVP]]

Can this procedure be scripted?

 

[Curtis Clay III [MSFT]]

Hello Kent,
Anything can be scripted. Have at it.

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/scriptcen
ter/default.asp

This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Torgeir Bakken (MVP)]

Can this procedure be scripted?

Yes.

You can use the IADsSecurityUtility interface to set registry permissions (from
e.g. a VBScript):

Retrieving, Setting, or Modifying Security Descriptors on File Systems, File
Shares, and Registry Keys
http://msdn.microsoft.com/library/e...ile_systems_file_shares_and_registry_keys.asp



but I think I would have used the builtin (WinXP) %windir%\system32\regini.exe
for this.

It is also an updated version of Regini.exe is in the Win2k3 Server Resource
Kit (for Win2k/WinXP as well), and for documentation, see rktools.chm in the
RK.



To add the "Shut down the system" right, you can do a call-out to the Win2k3
Server Resource Kit tool ntrights.exe (Win2k/WinXP/Win2k3):

ntrights.exe +r SeShutdownPrivilege -u <username/groupname>

How to Set Logon User Rights with the Ntrights.exe Utility
http://support.microsoft.com/?kbid=279664

How to: Determine NTRIGHTS Names and Meanings
http://support.microsoft.com/?kbid=245207

For more documentation on ntrights, see rktools.chm in the RK.


Windows Server 2003 Resource Kit Tools
http://www.microsoft.com/downloads/...69-57ff-4ae7-96ee-b18c4790cffd&DisplayLang=en

(The kit will install on WinXP or later)

 

[Kent W. England [MVP]]

Yes, regini information is exactly what I was looking for. Thanks for
the lead. It's pretty annoying to have to create .reg files using one
syntax, .ini files using another syntax, and regini scripts with another
syntax.

 

[aaronblankenship]

Here, I'll do all the work This gives "Everyone" full access.

All Users - Edit Power Settings.cmd >>
regini AllUsersEditPower.config

AllUsersEditPower.config >>
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Power [1 7]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Controls Folder\PowerCfg [1 7]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Controls Folder\PowerCfg\GlobalPowerPolicy [1 7]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Controls Folder\PowerCfg\PowerPolicies [1 7]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Controls Folder\PowerCfg\PowerPolicies\0 [1 7]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Controls Folder\PowerCfg\PowerPolicies\1 [1 7]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Controls Folder\PowerCfg\PowerPolicies\2 [1 7]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Controls Folder\PowerCfg\PowerPolicies\3 [1 7]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Controls Folder\PowerCfg\PowerPolicies\4 [1 7]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Controls Folder\PowerCfg\PowerPolicies\5 [1 7]