To enforce a power setting using Group Policy, use the Group Policy Management Console to edit a new or existing Group Policy Object (GPO). Even if the user changes power plans, the Group Policy power setting is enforced. While Windows Vista does let the user switch between power plans (such as battery saver and balanced), the administrator can use Group Policy to enforce specific settings within those power plans. If the user attempts to make a change, the Windows Vista Power Options Control Panel informs him that the selected power policies may not be changed because they are enforced by the administrator. The advantage of using Group Policy to configure power settings is that Windows Vista will use the values specified by Group Policy, preventing end users from changing the settings. This, of course, can be used to set power-related features, such as display and system sleep settings. Using Group Policy to Enforce Power SettingsĪs you know, administrators can enforce specific settings using Group Policy in Windows Vista. My current solution if I can't find a better one is going to be to lock down the settings available from the 'immersive control panel' via group policy and then change the security options on powercfg.cpl. The other problem I've run into with locking down the settings via group policy is it would appear I need to lock down *all* of the settings as standard non-admin users can also go into the advanced 'power options' (powercfg.cpl) and change things like the 'hard drive sleep' time. I can set the sleep setting in group policy and then it locks it down, but then if this build gets used on someone's assigned laptop (where we would give them administrator rights), they wouldn't be able to change the power options. It's hard to get a read on the internet whether or not this is normal as most searches on the topic refer to Windows XP, but if I log on as a standard user and change the sleep setting, for example, it applies to everyone.

It would appear that standard users have the rights to change power options. Ideally I'd leave it open though and only lock down the things that I see as potentially causing a problem, which so far is mainly the power options. My next try was just going to be altering the security of the systemsettings.exe. I tried multiple methods of using AppLocker and failed. I have mostly everything how I want it in the Windows 10 sysprep image I'm building except for the power option.įirst of all, I cannot figure out how to lock down the new 'Immersive control panel' aka 'System Settings' aka 'systemsettings.exe' aka 'PC Settings'. We used to use Fortres Grand to lock down our Windows XP and 7 desktops and with Windows 10 I am trying to move away from it and rely mainly on the built-in windows security.

Ultimate settings panel pro