Hi Onni,
Thank you for your post.
To make a user be able to add or change the printer, you need to add the
user into the power user group and grant the account with "Load and Unload
Device Drivers" privilege. Please refer to the following article for
further information.
297780 A Description of the Privilege That a User Must Have to Install or
http://support.microsoft.com/?id=297780
Regarding the power settings, you cannot alter the power schemes when you
are logged on as a normal user. Unless a normal user is given administrator
access on a Windows XP computer, they are unable to change the default
values for the Power Schemes.
Since this is a per-user setting, an administrator can follow these steps
to enable some power settings for users.
1. Log on as Administrator.
2. Click Start, click Run, and then type "Regedt32" (without the quotation
marks).
3. Locate and click the following registry key:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Controls
Folder\PowerCfg\GlobalPowerPolicy
On the Security menu, click Permissions. Either add the users separately,
or add the users' group and give all the users full control over this key.
4. Locate and click the following registry key:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Controls
Folder\PowerCfg\PowerPolicies
On the Security menu, click Permissions. Either add the users separately,
or add the user s' group and give all the users full control over this key.
5. In addition, users need to be given the right to shut down the system.
To accomplish this, follow these steps:
a. In Control Panel, double-click Administrative Tools, and then
double-click "Local Security Policy".
b. In the left pane, expand Local Policies and click User Rights
Assignment.
c. In the right pane, double-click "Shut down the system", and add
each user individually or add the Users group to this local security policy.
d. In the right pane, double-click "Create a pagefile", and add each
user individually or add the Users group to this local security policy.
Making these changes will allow normal users to alter power scheme settings
without being added to the Local Administrators group.
As for unattended installation, since this file can only define the
installation components and it cannot control the group policies and
registry permissions, you are unable to do this directly with this file.
You need to implement this after you install Windows XP.
I hope this addresses your issue. If you have further questions, please
feel free to let me know. I look forward to hearing from you.
Regards,
Eric Shen
Product Support Services
Microsoft Corporation
This posting is provided "AS IS" with no warranties, and confers no rights.
Get Secure! -
www.microsoft.com/security
--------------------
| Content-Class: urn:content-classes:message
| From: "Onni Rautanen" <
[email protected]>
| Sender: "Onni Rautanen" <
[email protected]>
| Subject: How to grant normal user more rights
| Date: Thu, 11 Sep 2003 00:51:49 -0700
| Lines: 12
| Message-ID: <
[email protected]>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="iso-8859-1"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Thread-Index: AcN4OY6jo02a0M04ToWn8Kx+DvYNmQ==
| X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300
| Newsgroups: microsoft.public.windowsxp.security_admin
| Path: cpmsftngxa06.phx.gbl
| Xref: cpmsftngxa06.phx.gbl microsoft.public.windowsxp.security_admin:83758
| NNTP-Posting-Host: TK2MSFTNGXA08 10.40.1.160
| X-Tomcat-NG: microsoft.public.windowsxp.security_admin
|
| What needs to be changed so that normal users can add
| local printers and change advanced power settings
| (ie. 'When I close the lid of my portable computer' ....)?
| and how can this change be done easily in a scripted
| unattended installation?
|
| Onni Rautanen
| System Specialist
|
| TietoEnator Corporation
| Processing & Network Support
|
|
