RE: Power Management settings via Registry

Hi ,

Glad to provide assistance.

Have a good day!


Best regards,

Vincent Xu
Microsoft Online Partner Support

======================================================
Get Secure! - www.microsoft.com/security
======================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others
may learn and benefit from this issue.
======================================================
This posting is provided "AS IS" with no warranties,and confers no rights.
======================================================



--------------------
Thread-Topic: Power Management settings via Registry
thread-index: Acci2Rg0zFdTUhHQSM+cpfdS3+iSyQ==
X-WBNR-Posting-Host: 204.185.70.250
From: =?Utf-8?B?TmF0aGFuIE1hcnNo?= <NathanMarsh@xxxxxxxxxxxxxxxxxxxxxxxxx>
References: <#gUgmPyHHHA.1264@xxxxxxxxxxxxxxxxxxxx>
<cqVbaY0HHHA.4020@xxxxxxxxxxxxxxxxxxxxxx>
Subject: RE: Power Management settings via Registry
Date: Mon, 18 Dec 2006 11:17:01 -0800
Lines: 136
Message-ID: <164DD361-3FB4-43EC-943E-705BFF001146@xxxxxxxxxxxxx>
MIME-Version: 1.0
Content-Type: text/plain;
charset="Utf-8"
Content-Transfer-Encoding: 7bit
X-Newsreader: Microsoft CDO for Windows 2000
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2757
Newsgroups: microsoft.public.windowsxp.security_admin
Path: TK2MSFTNGHUB02.phx.gbl
Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windowsxp.security_admin:671
NNTP-Posting-Host: tk2msftsbfm01.phx.gbl 10.40.244.148
X-Tomcat-NG: microsoft.public.windowsxp.security_admin

Thanks for your help, I will try that.
--
Nathan Marsh
Chillicothe R-2 School District
Chillicothe MO


"Vincent Xu [MSFT]" wrote:

Hi,

According to your description, my understanding of this issue is: You
want
to use a GPO or change the registry keys to modify settings in Power
Management. If I have misunderstood your concern, please feel free to
let
me know.

Based on my research, this can be done through a policy using the
powercfg.exe tool. This utility is introduced in Windows Server 2003
family. However, I have tested it on Windows XP SP2 and on 2000 sp3 and
it
appeared to work fine.

Documentation for this tool can be found at

324347 How to Use Powercfg.exe in Windows Server 2003
http://support.microsoft.com/?id=324347

Here is how we created this policy:

1. Copy the powercfg.exe and the batch file to the netlogon share
Here is an example of a batch file
XXXXXXXXXXXXXXXXXXXXXXXXXXXXX
@echo off
net use x: \\domain.com\netlogon
x:
powercfg.exe /change "always on" /monitor-timeout-ac 0
powercfg.exe /SETACTIVE "always on"
c:
net use x: /delete
XXXXXXXXXXXXXXXXXXXXXXXXXXXX

2. Create a group policy that will be applied by the computer and the
user

3. Add the path to the netlogon share and the batch file that you have
created as a logon script.

4. Go to the user rights section of the policy under the computer
configuration and give the users the right to "shut down the system".

5. Go the registry section under computer\windows settings\security
settings section of the policy and give the users full control to the
following keys. Please set this to propagate to the sub folders.


HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ControlsFolder\
PowerCfg

HKEY_CURRENT_USER\Control Panel\PowerCfg

Once the policy applies the setting will take effect the second time
the
user logs in. The first time it will fail because the other rights and
permissions have not taken effect.

Now this gives the users the rights to change this setting which the
customer did not like even though it would get reset everytime they
logged
on.

So as an additional part of the policy you can use the file system
permissions section to deny the users the right to the file
%systemroot\system32\powercfg.cpl. This will not let them open the
Control
Panel extension to view or change the power settings even though they
have
the actual power to change the settings.

If anything is unclear or you need further assistance on this issue,
please
feel free to let me know.

You can refer to the examples as above. Hope this helps.

Best regards,

Vincent Xu
Microsoft Online Partner Support

======================================================
Get Secure! - www.microsoft.com/security
======================================================
When responding to posts, please "Reply to Group" via your newsreader
so
that others
may learn and benefit from this issue.
======================================================
This posting is provided "AS IS" with no warranties,and confers no
rights.
======================================================



--------------------
From: "Nate" <n8issogr8@xxxxxxxxxxxxxx>
Subject: Power Management settings via Registry
Date: Wed, 13 Dec 2006 20:02:03 -0600
Lines: 12
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset="iso-8859-1";
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Windows Mail 6.0.6000.16386
X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6000.16386
Message-ID: <#gUgmPyHHHA.1264@xxxxxxxxxxxxxxxxxxxx>
Newsgroups: microsoft.public.windowsxp.security_admin
NNTP-Posting-Host: customer106_28.grm.net 216.139.106.28
Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl
Xref: TK2MSFTNGHUB02.phx.gbl
microsoft.public.windowsxp.security_admin:540
X-Tomcat-NG: microsoft.public.windowsxp.security_admin

Can someone tell me what keys in the registry that I need to edit to
change
the power management settings for the whole machine, not just the
current
user. The machines would all be winXP pro w/ sp2 installed. I would
like
to be able to push out registry settings that tell the macine when to
go
to
standby. I am wanting to do this so that I can configure other tasks
(virus
scanning, auto-updating) to run after the users leave for the day and
before
the machines go to standby. I am using novell zenworks to push out
these
settings, if anyone has any other ideas of how to do this I would be
glad
to
hear. Thanks.

Nate






.

Relevant Pages

  • RE: Power Management settings via Registry
    ... to use a GPO or change the registry keys to modify settings in Power ... this can be done through a policy using the ... Copy the powercfg.exe and the batch file to the netlogon share ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Execute a batch file problem
    ... Your security group does not need to fall within the context of the OU ... "Apply Group Policy" settings. ... Your batch file shouldn't and isn't really out on that network share... ...
    (microsoft.public.win2000.group_policy)
  • Re: scripted logon
    ... Why can't you launch all the scripts from a Group Policy based Logon script. ... Here's the policy settings (I sure hope word wrap doesn't mess it up too ... Windows Components/Windows Installer ...
    (microsoft.public.windows.terminal_services)
  • Re: GPO Update Problem (SYSVOL access via UNC)
    ... Server Security and Auditing Policy ... This list only includes links in the domain of the GPO. ... The settings in this GPO can only apply to the following groups, users, ...
    (microsoft.public.win2000.group_policy)
  • Re: GPO Update Problem (SYSVOL access via UNC)
    ... > Server Security and Auditing Policy ... > This list only includes links in the domain of the GPO. ... > The settings in this GPO can only apply to the following groups, users, ...
    (microsoft.public.win2000.group_policy)