Avian Waves : Blog
Topic: All
Search Blog
 
Recent Comments
Using a Reverse Proxy to Automatically Force External Lync Meeting Guests to Use Silverlight Client (7)
buy facebook fans: I am very much impressed from this excellent...

I've Been Blog-Memed? Who Knew I Was So Popular! (3)
college term papers: Hi there. Truly cool Anime ... I only got into...

Mystery of the Server 2008 + IIS7 + OLE = "MDAC Not Installed" Error (20)
Carlos: great article. I had that setting set to True at...

Elfen Lied: One Messed Up (But Awesome) Anime (8)
Spice incense: Very well written in this blog.I am glad to read...
Last 15 Posts
Archives
Posted By Timothy • Topic: Tech
Feb 27, 2007 9:56 AM EDT

Microsoft doesn't have a lot of good literature on how to do this, so that's why I am writing this post. 

We have users who frequently take their laptops on business trips to do presentations.  Having the monitor blank out from inactivity during a long discussion is a frequent complaint.  Worse is when the computer goes into standby!

Normally these are great things as it saves the laptop's battery life.  But sometimes you just want to turn these options off, or modify them to your liking.  Doing so usually requires administrator priveleges.  But it SHOULDN'T have to!

To grant the ability to change machine power management settings to your users, simply grant them Full Control (minus take ownership/change permissions) on the following registry key.  This can, of course, be deployed through a GPO, too.

HKLM\Software\Microsoft\Windows\CurrentVersion\Controls Folder\PowerCfg

Now your users can mess with the power options all they want without bugging you!

I couldn't think of any security reason why this is bad (short of corrupting the registry's stored power settings, but I hardly think that will cause a BSOD or cause any truely bad unrecoverable problem or information disclosure -- maybe just some angry message boxes from Explorer?  I haven't tried...)

NOTE: This will NOT affect any sort of screen saver timeout that you have controlled through Group Policy.  Those settings can be handled through the Administrative Template in the User Settings.  The screen saver policy is more security critical, IMHO, because this is where you can force the screen saver to require a password to unlock the machine.

Trackbacks :
Send trackbacks to this URL:
http://www.avianwaves.com/Blog/track.aspx?id=27
In your blog post, you must link back to my post using this URL:
http://www.avianwaves.com/Blog/default.aspx?id=27
Comments :
What I really want is for each limited user to be able to create and save his or her own power saver scheme without being able to delete or change settings on any of the built in power saver schemes that come with the computer. I denied limited users from going into regedit so it is unlikely that a limited user can take ownership or change permissions on the registry key in question. (I don't want limited users to be able to do this either.)

Nevertheless, can anyone reading this comment and who is knowledgable in this area of expertise email me and give me the exact way the permissions should be set to be able to achieve what I a trying to do and no more? Please be as specific as possible, as I know just enough about using regedit to be dangerous.

If the blog rules only allow the answer to my question to be posted to the blog, then can the expert simply email me with a remark to simply go back to the blog or give me a private way to contact the expert?

I doubt if my users are advanced enough to do any harm, but I am cautious with the computers I am responsible for.
Comment By James Feinstein At 7/25/2008 3:58 AM EDT PermaLink
This is James Feinstein again. My email is jamesmfeinstein@hotmail.com.
Comment By James Feinstein At 7/25/2008 4:00 AM EDT PermaLink
I wish to comment that this is only a partial solution. I have a computer manufactured by Toshiba, but the manufacturer is irrelevant. When I implement this solution, the user can mess with the power schemes all they want, create and save a new power scheme, etc. However, the next time the limited user logs in, it will always revert back to the Toshiba Power Saver power scheme, and the limited user will have to set the newly created power scheme, once again for the duration of the new login. Here are my questions: 1. How can a limited user create a new power scheme, make the change one time, and have the login account retain the change? 2. If the computer administrator does not like the settings for the default power scheme that came with the computer, how can an administrator create an entirely new default Power Saver power scheme, visible to all users? If I try to make any changes to the default power scheme that is built into the machine, I will get a fatal error with reference to that default power scheme and will have to do a restore. Microsoft technicians seem to have a poor understanding on this topic and I cannot count on Toshiba for support. My email is jamesmfeinstein@hotmail.com.
Comment By James Feinstein At 9/12/2008 2:53 PM EDT PermaLink
Honestly, for the level of complexity required in your situation, you really want to go with Vista. The XP work-around I posted was not an ideal solution, but it worked until Vista came out and was more prominent. Microsoft engineers are doing better in Vista. XP is an eight year old operating system now. You can't expect a complete reengineering of a subsystem on an OS that old.
Comment By Timothy At 9/12/2008 3:11 PM EDT PermaLink
Toshibas use a custom applet in the system tray (Toshiba Power Saver.) The reason the above registry tweak isn't working for you is that you have to tell Toshiba Power Saver how to behave elsewhere...

To allow limited users to edit their power configs on a Toshiba, log-in as an administrator, double-click the "Toshiba Power Saver" icon in the system tray (a blue battery with yellow lightning bolts), click the "Setup Options" button at the bottom-left of the panel, then put a check-mark in the "Allow Limited Users to Change Settings" checkbox (only visible when logged in as an admin.) Limited users will now be able to change/edit their power profiles.
Comment By John At 1/4/2010 2:51 PM EDT PermaLink
Hi :)
I can report that on a Lenovo T410i the suggestion works both on the OS (Windows XP Pro sp3) and on the manifacturer management software (ThinkVantage Power Manager).
A lot of thanks to Timothy for the trick :)
Comment By Alessandro Stillitano At 8/24/2010 5:09 AM EDT PermaLink
Add Comment :
Name :
Email :
URL (Optional) :
       
Comments :
Allowed BBCode Tags : LINK (URL), BOLD, ITALIC, UNDERLINE, QUOTE


By posting a comment to this blog, I agree to the blog rules.

This Avian Waves blog is powered by a modified version of Presstopia Blog




Avian Waves Logo