Lenovo ThinkPad Edge E50 (English) Power Manager Deployment Guide - Page 51

Appendix A. Deploying power schemes for non-administrator groups or users on Windows XP client computers

Page 51 highlights

Appendix A. Deploying power schemes for non-administrator groups or users on Windows XP client computers Non-administrator groups or users on Windows XP client computers have no permission to change the power scheme settings. By design, this is a feature of the Windows XP operating system. To deploy Power Manager plans successfully to Windows XP client computers for non-administrator groups or users, the IT administrator needs to configure the domain server by doing the following: 1. On a domain server, click Start ➙ Run, and type dsa.msc in the Open box. The Active Directory Users and Computers window opens. 2. Right-click on a domain container and select Properties. The Properties window opens. 3. Click the Group Policy tab, and click the New button to create a new group policy object. 4. Rename the group policy object with Power Configuration Policy and press Enter. 5. Click Edit. The Group Policy Object Editor opens. 6. Set the security permission for the following key: MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Controls Folder\PowerCfg by doing the following: a. Under Computer Configuration, click Windows Settings ➙ Security Settings, right-click Registry, and select Add Key. The Select Registry Key window opens. b. Type the following key in the Selected key box: MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Controls Folder\PowerCfg c. Click OK. The Database Security window opens. d. On the Security tab, select the non-administrator group(s) or user(s) you want to give permission to, assign Full Control permission to the group(s) or user(s), and click Apply. e. Click Advanced. The advanced window opens. f. On the Permissions tab, select the group(s) or user(s), select the Allow inheritable permissions from the parent to propagate to this object and all child objects. Include these with entries explicitly defined here." option, and click OK. The Add Object window opens. g. Select the Propagate inheritable permissions to all subkeys option, and click OK. 7. Set the security permission for the following key: USERS\.DEFAULT\Control Panel\PowerCfg by doing the following: a. Under Computer Configuration, click Windows Settings ➙ Security Settings, right-click Registry, and select Add Key. The Select Registry Key window opens. b. Type the following key in the Selected key box: USERS\.DEFAULT\Control Panel\PowerCfg c. Click OK. The Database Security window opens. d. On the Security tab, select the non-administrator group(s) or user(s) you want to give permission to, assign Full Control permission to the group(s) or user(s), and click Apply. e. Click Advanced. The advanced window opens. f. On the Permissions tab, select the group(s) or user(s), select the Allow inheritable permissions from the parent to propagate to this object and all child objects. Include these with entries explicitly defined here." option, and click OK. The Add Object window opens. g. Select the Propagate inheritable permissions to all subkeys option, and click OK. 8. Check there are two group policy objects generated in the Active Directory Users and Computers window: © Copyright Lenovo 2008, 2011 45

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56

Appendix A.
Deploying power schemes for non-administrator
groups or users on Windows XP client computers
Non-administrator groups or users on Windows XP client computers have no permission to change the
power scheme settings. By design, this is a feature of the Windows XP operating system. To deploy Power
Manager plans successfully to Windows XP client computers for non-administrator groups or users, the IT
administrator needs to configure the domain server by doing the following:
1. On a domain server, click
Start
Run
, and type
dsa.msc
in the
Open
box. The Active Directory Users
and Computers window opens.
2. Right-click on a domain container and select
Properties
. The Properties window opens.
3. Click the
Group Policy
tab, and click the
New
button to create a new group policy object.
4. Rename the group policy object with
Power Configuration Policy
and press Enter.
5. Click
Edit
. The Group Policy Object Editor opens.
6. Set the security permission for the following key:
MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ControlsFolder\PowerCfg
by doing the following:
a.
Under
Computer Configuration
, click
Windows Settings
Security Settings
, right-click
Registry
,
and select
Add Key
. The Select Registry Key window opens.
b. Type the following key in the
Selected key
box:
MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ControlsFolder\PowerCfg
c.
Click
OK
. The Database Security window opens.
d. On the
Security
tab, select the non-administrator group(s) or user(s) you want to give permission to,
assign Full Control permission to the group(s) or user(s), and click
Apply
.
e.
Click
Advanced
. The advanced window opens.
f.
On the
Permissions
tab, select the group(s) or user(s), select the
Allow inheritable permissions
from the parent to propagate to this object and all child objects. Include these with entries
explicitly defined here.
" option, and click
OK
. The Add Object window opens.
g. Select the
Propagate inheritable permissions to all subkeys
option, and click
OK
.
7. Set the security permission for the following key:
USERS\.DEFAULT\Control Panel\PowerCfg
by doing the following:
a.
Under
Computer Configuration
, click
Windows Settings
Security Settings
, right-click
Registry
,
and select
Add Key
. The Select Registry Key window opens.
b. Type the following key in the
Selected key
box:
USERS\.DEFAULT\Control Panel\PowerCfg
c.
Click
OK
. The Database Security window opens.
d. On the
Security
tab, select the non-administrator group(s) or user(s) you want to give permission to,
assign Full Control permission to the group(s) or user(s), and click
Apply
.
e.
Click
Advanced
. The advanced window opens.
f.
On the
Permissions
tab, select the group(s) or user(s), select the
Allow inheritable permissions
from the parent to propagate to this object and all child objects. Include these with entries
explicitly defined here.
" option, and click
OK
. The Add Object window opens.
g. Select the
Propagate inheritable permissions to all subkeys
option, and click
OK
.
8. Check there are two group policy objects generated in the Active Directory Users and Computers
window:
© Copyright Lenovo 2008, 2011
45