Help-Power Policy Manager-RegHack using regini.exe ?

From: Mike Cross (VA_Tech@mail.com)
Date: 09/05/02 

Date: Thu, 05 Sep 2002 14:34:18 -0600
From: Mike Cross <VA_Tech@mail.com>
To: Michael.Cross2@Med.VA.Gov

I found the following post while doing a Google search, It described
our problem and the solution works good except for item number 5 - I put
my remarks and some of yours in itialics.
.
The situation is that I need to semi-automate this and a few other
processes using some sort of batch file - reg hack. Either reg or
regini but I don’t have the experience to accomplish this - could you
assist ?? I can do the batch file part but the reg hack has me stumped.

As per messages and phone conversations with Todd (OEMs/SystemBuilders)
we were able to get Office 2000 to work with our Windows 2000 system.
The resolution to our problem was to change permissions in the registry
in several places.
Now this problem came along and it also requires changing the
permissions. If I can figure out how to how it with your solution I can
also apply it with the Office permissions changes from Todd.

Here is one that I tried and it didn’t work

REGEDIT4

[Hkey_Local_Machine\Software\Microsoft\Windows\CurrentVersion\ControlFolder\PowerCfg\GlobalPowerPolicy
[1 11 14 21]

I feel that it must be done using regini but how ??
Like I said I am very new at doing anything of the type to the
registry. I will be applying this fix to 6 or 7 master clones (Dell GX
series) that will be used to update our numerous computers with Windows
2000 - Office 2000 with Enterprise License plus other programs specific
to a hospital operation.
So as you can see - it would be very helpful to be able to put this in a
batch file and correct our problem.

Any assistance will be appreciated
Mikeee
Michael.Cross2@Med.VA.Gov

==========================================================
From: Thomas Foster [MS] (a-thomf@online.microsoft.com)
 Subject: Re: Power Policy Manager
 Newsgroups: microsoft.public.win2000.security
 Date: 2002-06-20 13:58:25 PST

Hi John,

I assume this is for Local Machines logged onto a Domain environment
where users are not a member of Local Administrators. (This is true in
our case)

1. Log on as Administrator on the Local Machine

2. Click Start , click Run, and then type "Regedt32" (without the
quotation marks).

3. Locate and click the following registry key:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ControlsFol
ler\PowerCfg\GlobalPowerPolicy

   On the Security menu, click Permissions. Either add the users
separately,
or
   add the user s' group and give all the users full control over this
key.
        (I gave them the same privileges as a power user)

4. Locate and click the following registry key:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ControlsFolder\PowerCfg\PowerPolicy

   On the Security menu, click Permissions. Either add the users
separately,
or
   add the user s' group and give all the users full control over this
key.
  (I gave them the same privileges as a power user but only for the 0
group)

(I omitted this step (5) I found that I didn’t need it - our system
shuts down normally without it ?? Is there something that I’m over
looking here and this step is needed after all Help ??)
5. In addition, users need to be given the right to shut down the
system. To accomplish this, follow these steps:

   a. In Control Panel, double-click Administrative Tools, and then
double-click
      "Local Security Policy".

   b. In the left pane, expand Local Policies and click User Rights
Assignment.

   c. In the right pane, double-click "Shut down the system", and add
each user
      individually or add the Users group to this local security policy.

Making these changes will allow normal users to alter power scheme
settings
without being added to the Local Administrators group.

If this is for Domain Users, you could also try pusing out the registry
keys in a logon script.

I hope this helps 

--
Thomas Foster
Microsoft Support
Get Secure! :  http://www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

Relevant Pages