General discussion


Win2k Server XP clients policy problem

By jim.combs ·
Hi all,
I am being stumped by one part of this new puzzle. A small company will be moving to a new office, the owner wants to keep old server and buy new work stations. Owner does not have enough money for new server software. Here is what I have to work with.

Win 2000 Server box which has ? single internal domain, config as PDC with DNS, active dir. The server acts as their file repository. There are 12 brand new XP pro SP2 work stations 11 are work stations and one for CAD. It?s all pretty garden variety as small networks go, I have configured all of the XP boxes with static IP?s DNS points to the Server which then forwards to the ISP for any non internal resolutions such as web surfing and pop3 E-mail from the ISP.

My problem is this When a regular user logs on to the domain, they gain rights to the active directory shares and printers available, and all works wonderful with one exception it appears that the default domain group policy does not allow the user to change the Local Power Option Properties such as ?Turn off monitor? ?Turn off hard disks? and the System Standby? settings. When they attempt to make changes to these items they get the following error, ?Power Policy Manager Unable to set Active Policy? I also noted that the Windows Fire wall is also automatically turned on each time they log on to the domain and they can not turn it off, it is grayed out. This happens for all users on all of the new XP boxes.
I have scoured the default domain group policy from top to bottom on the win 2000 server and for the life of me can not find anything in there the relates to the Display power settings and the windows firewall settings. What am I missing here? Am I looking in the wrong place? Can anyone point me in the right direction? Is it OK to run windows server 2000 with XP or does the owner have to upgrade to server2003. Any help would be greatly appreciated.


This conversation is currently closed to new comments.

3 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

by ewgny In reply to Win2k Server XP clients p ...

You need to change permissions on the following reg key to allow non local admins to chance the power settings HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\Controls Folder\Powercfg
int the security settings of powerconig give the "everyone" group full permissions

As far as the firewall
you will also want to update your server 200 Group policy
or manage group policy from a win XP sp2 bos
with GPMC to be able to control the firewall settings

Collapse -

by ewgny In reply to

Excuse my spelling, my wife was yelling at me to stop playing on the computer

Collapse -

by CG IT In reply to Win2k Server XP clients p ...

This is a domain, though the first answer is great for local machines it's not good for an Active Directory based domain in which group policy takes presedence over local policy.e.g. policy is processed local, site, domain and OU in that order.

There are 2 settings in Group Policy. Computer and user. Desktop settings are under user configuration. The power management option is not for system standby etc. What might have happened is that you used one of the built in security templates available for W2K Active Directory that disables that feature. These templates also remove the users ability to shut down the computer from the log on screen.

Can't guarentee thats what happened but it sounds like it.

here's an article on security templates for W2K.

Windows 2000 server doesn't have firewall settings in group policy. only the local machine XP has firewall settings which you can disable.

Here's the KB article;en-us;283673

Back to Windows Forum
3 total posts (Page 1 of 1)  

Related Discussions

Related Forums