Lenovo ThinkPad T440p (English) Power Manager Deployment Guide - Page 63

Appendix A. Deploying power schemes for non-administrator groups or users on Windows XP client computers

Page 63 highlights

Appendix A. Deploying power schemes for non-administrator groups or users on Windows XP client computers Non-administrator groups or users on Windows XP client computers have no permission to change the power scheme settings. By design, this is a feature of the Windows XP operating system. To deploy Power Manager plans successfully to Windows XP client computers for non-administrator groups or users, the IT administrator needs to configure the domain server by doing the following: 1. On a domain server, click Start ➙ Run, and type dsa.msc in the Open box. The Active Directory Users and Computers window opens. 2. Right-click on a domain container and select Properties. The Properties window opens. 3. Click the Group Policy tab, and click the New button to create a group policy object. 4. Rename the group policy object with Power Configuration Policy and press Enter. 5. Click Edit. The Group Policy Object Editor opens. 6. Set the security permission for the following key: MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Controls Folder\PowerCfg by doing the following: a. Under Computer Configuration, click Windows Settings ➙ Security Settings, right-click Registry, and select Add Key. The Select Registry Key window opens. b. Type the following key in the Selected key box: MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Controls Folder\PowerCfg c. Click OK. The Database Security window opens. d. On the Security tab, select the non-administrator group(s) or user(s) you want to give permission to, assign Full Control permission to the group(s) or user(s), and click Apply. e. Click Advanced. The advanced window opens. f. On the Permissions tab, select the group(s) or user(s), select the Allow inheritable permissions from the parent to propagate to this object and all child objects. Include these with entries explicitly defined here." option, and click OK. The Add Object window opens. g. Select the Propagate inheritable permissions to all subkeys option, and click OK. 7. Set the security permission for the following key: USERS\.DEFAULT\Control Panel\PowerCfg by doing the following: a. Under Computer Configuration, click Windows Settings ➙ Security Settings, right-click Registry, and select Add Key. The Select Registry Key window opens. b. Type the following key in the Selected key box: USERS\.DEFAULT\Control Panel\PowerCfg c. Click OK. The Database Security window opens. d. On the Security tab, select the non-administrator group(s) or user(s) you want to give permission to, assign Full Control permission to the group(s) or user(s), and click Apply. e. Click Advanced. The advanced window opens. f. On the Permissions tab, select the group(s) or user(s), select the Allow inheritable permissions from the parent to propagate to this object and all child objects. Include these with entries explicitly defined here." option, and click OK. The Add Object window opens. g. Select the Propagate inheritable permissions to all subkeys option, and click OK. 8. Check there are two group policy objects generated in the Active Directory Users and Computers window: © Copyright Lenovo 2008, 2013 57

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68

Appendix A. Deploying power schemes for non-administrator
groupsorusersonWindowsXPclientcomputers
Non-administrator groups or users on Windows XP client computers have no permission to change the
power scheme settings. By design, this is a feature of the Windows XP operating system. To deploy Power
Manager plans successfully to Windows XP client computers for non-administrator groups or users, the IT
administrator needs to configure the domain server by doing the following:
1. On a domain server, click
Start
Run
, and type
dsa.msc
in the
Open
box. The Active Directory Users
and Computers window opens.
2. Right-click on a domain container and select
Properties
. The Properties window opens.
3. Click the
GroupPolicy
tab, and click the
New
button to create a group policy object.
4. Rename the group policy object with
Power Configuration Policy
and press Enter.
5. Click
Edit
. The Group Policy Object Editor opens.
6. Set the security permission for the following key:
MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ControlsFolder\PowerCfg
by doing the following:
a. Under
ComputerConfiguration
, click
WindowsSettings
SecuritySettings
, right-click
Registry
, and select
AddKey
. The Select Registry Key window opens.
b. Type the following key in the
Selectedkey
box:
MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ControlsFolder\PowerCfg
c. Click
OK
. The Database Security window opens.
d. On the
Security
tab, select the non-administrator group(s) or user(s) you want to give permission to,
assign Full Control permission to the group(s) or user(s), and click
Apply
.
e. Click
Advanced
. The advanced window opens.
f. On the
Permissions
tab, select the group(s) or user(s), select the
Allowinheritablepermissions
fromtheparenttopropagatetothisobjectandallchildobjects.Includethesewithentries
explicitlydefinedhere.
" option, and click
OK
. The Add Object window opens.
g. Select the
Propagateinheritablepermissionstoallsubkeys
option, and click
OK
.
7. Set the security permission for the following key:
USERS\.DEFAULT\Control Panel\PowerCfg
by doing the following:
a. Under
ComputerConfiguration
, click
WindowsSettings
SecuritySettings
, right-click
Registry
, and select
AddKey
. The Select Registry Key window opens.
b. Type the following key in the
Selectedkey
box:
USERS\.DEFAULT\Control Panel\PowerCfg
c. Click
OK
. The Database Security window opens.
d. On the
Security
tab, select the non-administrator group(s) or user(s) you want to give permission to,
assign Full Control permission to the group(s) or user(s), and click
Apply
.
e. Click
Advanced
. The advanced window opens.
f. On the
Permissions
tab, select the group(s) or user(s), select the
Allowinheritablepermissions
fromtheparenttopropagatetothisobjectandallchildobjects.Includethesewithentries
explicitlydefinedhere.
" option, and click
OK
. The Add Object window opens.
g. Select the
Propagateinheritablepermissionstoallsubkeys
option, and click
OK
.
8. Check there are two group policy objects generated in the Active Directory Users and Computers
window:
© Copyright Lenovo 2008, 2013
57