Windows Server TechCenter >
Windows Server Forums
>
Group Policy
>
Help with Power Schemes GPO in Windows 2008 R1 Domain
Help with Power Schemes GPO in Windows 2008 R1 Domain
- I am going bananas trying to stop the screen from going blank on 2 of my 'Monitor' type machines that display web pages with the status of critical devices and such.
I had this working on Montior1 but forgot how I did it so when I added Monitor2 to the domain, I created a new OU called MonitorMachines or something similar, put the computer accounts into this OU, went into GPO Msc created a new GPO OU type thing and have tried a number of different options with varying (spelling?) results.
I've read some TechNet docs on how the new GPO Preferences stuff works, thought I understood it all. But it doesn't function the way I'd expect it to. Not only that, but now there's Power Schemes that have disappeared. There are only 2 possible settings - Home/Office desk and Portable/Laptop. No big deal, but the properties in each of these have the power schemes are set to "Never". but still, the monitors turn off!
So many different combinations have been tried it might just be best to start over - I have removed the check mark from "Enforced", so currently the GPO is not being enforced.
Ok let's start over... I have the Default GPO set, where I want people's monitors to turn off after 20 minutes. This works fine.
I created a new OU in the Group Policy MSC (maybe it was already there, I don't remember), created a non-linked GPO for that OU with the power schemes I wanted, Turn off monitor = Never, Turn off hard disk = Never, System Standby = Never.
What the heck am I doing wrong? Most importantly, even though Power Options Properties (from the Control Panel on the Monitor machines) are set to "Never" why do the screens still turn off?
How did I get this to work on the Default GPO in the first place? Think I some-how I denied access to it on an ACL somewhere.
Target computers are running Windows XP Pro SP3... When ever I made a change to the GPO I issued a GPUPDATE /FORCE on the machines, even rebooted the bad boys.
I've changed the preferences, there must be settings somewhere, pretty sure I tweaked those too, just don't remember where it was. :)
Sorry for the mess appreciate the help.
Dane!- Edited byDaneDaneDane Thursday, October 29, 2009 7:27 PMChanged title from Settings to Schemes
Answers
- Dane,First thing to verify is that machines are getting the new GPO. Run gpresult from a command prompt on the systems and make sure they're applying the newly created GPO.Assuming that's working, check the preferences you've configured to see if they are only applying once (Common tab), rather than enforcing. Also, check the Power control panel on the systems and see what settings they are seeing as configured.Guy
- Marked As Answer byMervyn ZhangMSFT, ModeratorThursday, November 05, 2009 8:14 AM
- Here's what I would suggest for a step by step:1. Create a new GPO for the desired settings.2. Configure only the power settings that weren't working before (the scheme settings to prevent the monitors from going to sleep). Based on okon3's comments it might make sense you can work with user settings only, but I would suggest testing each (assuming you have dedicated user accounts) and even both to see if you can get it work.3. If you prefer to move the users and computers to a specific OU, you can, but I typically would tend to create a group with the computer and user accounts and then use security filtering on a GPO linked to the highest OU level that includes both the users and computers (or domain if necessary). Remember that user settings must be applied to users and computers settings to computers when you link and use security filtering.4. If the settings are not applied, review the GPO event logs and detailed debug logs to check for a problem or reason.5. If the settings apply successfully, back up the GPO and then add more settings and keep testing.In case you haven't found this already in your search, here is a step-by-step about configuring the actual GPO with a lot of detail: http://blogs.technet.com/grouppolicy/archive/2009/09/30/configuring-a-power-plan-with-group-policy-preferences-by-alan-burchill.aspxLet me know if you'd like more detailed information about any of the steps.Guyp.s. if you're still having the issue deleting the OU, right click the OU, open properties and uncheck the checkbox to protect the object from deletion.
- Marked As Answer byDaneDaneDane Wednesday, November 18, 2009 4:35 AM
- A few questions:1. Is the default domain policy enforced (right click and check setting)?2. Open GPMC, select the MonitoringComputers OU and select the Group Policy Inheritence tab, which GPOs show there?3. Which GPOs show as applied when running GPRESULT on monitor2?For monitor2, it sounds like we just need to figure out why its still getting the default domain policy. For Monitor1, it sounds like there's another source changing settings. If we can get monitor2 working, you may want to consider rebuild monitor1 if that's possible (I don't like suggesting this course of action, but it might take less time than other options).Guy
- Marked As Answer byDaneDaneDane Wednesday, November 18, 2009 4:35 AM
- A few questions:1. Is the default domain policy enforced (right click and check setting)?2. Open GPMC, select the MonitoringComputers OU and select the Group Policy Inheritence tab, which GPOs show there?3. Which GPOs show as applied when running GPRESULT on monitor2?For monitor2, it sounds like we just need to figure out why its still getting the default domain policy. For Monitor1, it sounds like there's another source changing settings. If we can get monitor2 working, you may want to consider rebuild monitor1 if that's possible (I don't like suggesting this course of action, but it might take less time than other options).Guy
Morning,
1. Yes
2. 1 (Enforced) Default Domain Policy corp.mydomain.org Enabled None
3. Default Doman Policy.
Also, just wanted to point out Monitor1 did NOT have the Client Side GPO Windows Update installed until yesterday morning. Monitor2 had them installed though.
I will turn off Enforced and see what happens.
Ok, with Enforced turned off GPRESULT shows no applied GPO on the Computer settings but shows Default Domain Policy on the User Settings. This is the same on both Monitor1 and Monitor2. I set the monitor off setting to Never again, let's see what happens.
Thanks,
Dane!- Marked As Answer byDaneDaneDane Wednesday, November 18, 2009 4:35 AM
The monitors are staying on!!!!!!!!!!!!!!!!!!!
Dane!
Hi,
Small update here, the monitors continue to stay on!
So I think my problem was having the "Enforced" setting set at the beginning. But, deleting the OU and recreating the GPO really helped narrow down the problem.
Thank you all for your help!
Dane!- Marked As Answer byDaneDaneDane Wednesday, November 18, 2009 4:36 AM
All Replies
- Dane,First thing to verify is that machines are getting the new GPO. Run gpresult from a command prompt on the systems and make sure they're applying the newly created GPO.Assuming that's working, check the preferences you've configured to see if they are only applying once (Common tab), rather than enforcing. Also, check the Power control panel on the systems and see what settings they are seeing as configured.Guy
- Marked As Answer byMervyn ZhangMSFT, ModeratorThursday, November 05, 2009 8:14 AM
- Thought you'd find this amusing. What I've done now to work around this problem is connect mice to the machines and have them dangling on a wall with a fan blowing on them. The air is blowing hard enough to make the mice hit the wall and jitter the pointer, keeping the monitor on.
\o/
Dane! Dane,
First thing to verify is that machines are getting the new GPO. Run gpresult from a command prompt on the systems and make sure they're applying the newly created GPO.Assuming that's working, check the preferences you've configured to see if they are only applying once (Common tab), rather than enforcing. Also, check the Power control panel on the systems and see what settings they are seeing as configured.Guy
Thanks, here's the results.
"Monitor1"
COMPUTER SETTINGS
------------------
CN=MONITOR1,OU=MonitoringComputers,DC=corp,DC=domainname,DC=org
Last time Group Policy was applied: 10/29/2009 at 12:41:18 PM
Group Policy was applied from: File01.corp.domainname.org
Group Policy slow link threshold: 500 kbps
Applied Group Policy Objects
-----------------------------
Default Domain Policy
The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
MonitoringGPO
Filtering: Disabled (Link)
Local Group Policy
Filtering: Not Applied (Empty)
The computer is a part of the following security groups:
--------------------------------------------------------
BUILTIN\Administrators
Everyone
BUILTIN\Users
NT AUTHORITY\NETWORK
NT AUTHORITY\Authenticated Users
MONITOR1$
Domain Computers
USER SETTINGS
--------------
CN=monitor account,CN=Users,DC=corp,DC=domainname,DC=org
Last time Group Policy was applied: 10/29/2009 at 12:42:08 PM
Group Policy was applied from: File01.corp.domainname.org
Group Policy slow link threshold: 500 kbps
Applied Group Policy Objects
-----------------------------
Default Domain Policy
The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Local Group Policy
Filtering: Not Applied (Empty)
The user is a part of the following security groups:
----------------------------------------------------
Domain Users
Everyone
BUILTIN\Administrators
BUILTIN\Users
NT AUTHORITY\INTERACTIVE
NT AUTHORITY\Authenticated Users
LOCAL
C:\>
"Monitor2"
COMPUTER SETTINGS
------------------
CN=MONITOR2,OU=MonitoringComputers,DC=corp,DC=domainname,DC=org
Last time Group Policy was applied: 10/29/2009 at 12:41:25 PM
Group Policy was applied from: File01.corp.domainname.org
Group Policy slow link threshold: 500 kbps
Applied Group Policy Objects
-----------------------------
Default Domain Policy
The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
MonitoringGPO
Filtering: Disabled (Link)
Local Group Policy
Filtering: Not Applied (Empty)
The computer is a part of the following security groups:
--------------------------------------------------------
BUILTIN\Administrators
Everyone
BUILTIN\Users
NT AUTHORITY\NETWORK
NT AUTHORITY\Authenticated Users
MONITOR2$
Domain Computers
USER SETTINGS
--------------
CN=monitor account,CN=Users,DC=corp,DC=domainname,DC=org
Last time Group Policy was applied: 10/29/2009 at 12:41:38 PM
Group Policy was applied from: File01.corp.domainname.org
Group Policy slow link threshold: 500 kbps
Applied Group Policy Objects
-----------------------------
Default Domain Policy
The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Local Group Policy
Filtering: Not Applied (Empty)
The user is a part of the following security groups:
----------------------------------------------------
Domain Users
Everyone
BUILTIN\Administrators
BUILTIN\Users
NT AUTHORITY\INTERACTIVE
NT AUTHORITY\Authenticated Users
LOCAL
C:\>
=====================================================================
Note the MonitoringGPO is currently disabled and before this I issues a GPUPDATE /FORCE and rebooted.
On monitor1, the Power Scheme is set to Portable/Laptop. The only other setting is "Home/Office Desk". Where did the other one's go? We can come back to that later. -- Anyway, the "Turn off Monitor" setting said "20 minutes" (this is what the default domain policy is set to), I set it to Never.
On monitor2, same results with the exception of the "Turn off Monitor" setting, it was set to "Never". Why the difference?
Think thats all for now.
Thanks!
Dane!- Are the 'Never' settings coming from the MonitoringGPO? that GPO link appears to be disabled for both systems. I would suggest enabling the link in order to get the GPO to apply to the computers.Once you confirm that the policy is applying, please test to see if the right settings are being applied.As far as the settings with the GPO, make sure that you are not using the 'Apply once and not reapply' on the common tab as this setting would mean that anyone with local rights can change the setting.Thanks for the descriptions of the mice and fan solution that gave me a great laugh.
Are the 'Never' settings coming from the MonitoringGPO? that GPO link appears to be disabled for both systems. I would suggest enabling the link in order to get the GPO to apply to the computers.
Once you confirm that the policy is applying, please test to see if the right settings are being applied.As far as the settings with the GPO, make sure that you are not using the 'Apply once and not reapply' on the common tab as this setting would mean that anyone with local rights can change the setting.Thanks for the descriptions of the mice and fan solution that gave me a great laugh.
Should I mark the fan / mouse thing as the answer? hehe no.
Ok couple things -
Apply once and not reapply was not set, still is not set. They are also set to "Replace", but tried "Update" too at one time.
GPO should be setting "Always ON" Power Scheme -- however this power scheme no longer appears as a possible scheme on the two monitoring machines.
As you suggested I have now set Link Enabled. Will issue a GPUPDATE /FORCE then GPRESULT and post ...
Doing this now... Wow it is taking longer to finish this time. Yeah, I'm feeling good about this.
Think I have/had Enforced and Link Enabled backwards - at least in my brain. I thought Enforced meant, enforce the GPO. Whereas Link Enabled would link this GPO to the Default GPO - Not sure in what order the settings are applied.
Ok rebooting now and will report back...
Not sure where the Never settings came from.. They should be coming from the MonitoringPolicy but could have been set manually. Nevertheless, the screen would still blank regardless of what is shown in the properties.
Here the output of GPRESULT - Link Enabled, Yes. Things look good, Yes?
"Monitor1"
COMPUTER SETTINGS
------------------
CN=MONITOR1,OU=MonitoringComputers,DC=corp,DC=microsoft,DC=org
Last time Group Policy was applied: 10/29/2009 at 5:05:42 PM
Group Policy was applied from: Certona-DC01.corp.microsoft.org
Group Policy slow link threshold: 500 kbps
Applied Group Policy Objects
-----------------------------
Default Domain Policy
MonitoringGPO
The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Local Group Policy
Filtering: Not Applied (Empty)
The computer is a part of the following security groups:
--------------------------------------------------------
BUILTIN\Administrators
Everyone
BUILTIN\Users
NT AUTHORITY\NETWORK
NT AUTHORITY\Authenticated Users
MONITOR1$
Domain Computers
USER SETTINGS
--------------
CN=monitor account,CN=Users,DC=corp,DC=microsoft,DC=org
Last time Group Policy was applied: 10/29/2009 at 5:06:11 PM
Group Policy was applied from: File01.corp.microsoft.org
Group Policy slow link threshold: 500 kbps
Applied Group Policy Objects
-----------------------------
Default Domain Policy
The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Local Group Policy
Filtering: Not Applied (Empty)
The user is a part of the following security groups:
----------------------------------------------------
Domain Users
Everyone
BUILTIN\Administrators
BUILTIN\Users
NT AUTHORITY\INTERACTIVE
NT AUTHORITY\Authenticated Users
LOCAL
C:\>
"Monitor2"
COMPUTER SETTINGS
------------------
CN=MONITOR2,OU=MonitoringComputers,DC=corp,DC=microsoft,DC=org
Last time Group Policy was applied: 10/29/2009 at 4:54:25 PM
Group Policy was applied from: File01.corp.microsoft.org
Group Policy slow link threshold: 500 kbps
Applied Group Policy Objects
-----------------------------
Default Domain Policy
MonitoringGPO
The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Local Group Policy
Filtering: Not Applied (Empty)
The computer is a part of the following security groups:
--------------------------------------------------------
BUILTIN\Administrators
Everyone
BUILTIN\Users
NT AUTHORITY\NETWORK
NT AUTHORITY\Authenticated Users
MONITOR2$
Domain Computers
USER SETTINGS
--------------
CN=monitor account,CN=Users,DC=corp,DC=microsoft,DC=org
Last time Group Policy was applied: 10/29/2009 at 4:54:40 PM
Group Policy was applied from: File01.corp.microsoft.org
Group Policy slow link threshold: 500 kbps
Applied Group Policy Objects
-----------------------------
Default Domain Policy
The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Local Group Policy
Filtering: Not Applied (Empty)
The user is a part of the following security groups:
----------------------------------------------------
Domain Users
Everyone
BUILTIN\Administrators
BUILTIN\Users
NT AUTHORITY\INTERACTIVE
NT AUTHORITY\Authenticated Users
LOCAL
C:\>
================================================
Thanks!
Dane!- Based on the results posted, your MonitoringGPO policy is now getting applied.Are you getting the desired results?If not, make sure you're using the right type of power scheme for the OS (XP vs. Vista/7) and maybe post a screen shot of your created scheme.Guy
Based on the results posted, your MonitoringGPO policy is now getting applied.
Are you getting the desired results?If not, make sure you're using the right type of power scheme for the OS (XP vs. Vista/7) and maybe post a screen shot of your created scheme.Guy
No. I thought it was fixed, but when I came in this morning both monitors were off.
Can I attach screen shots in these messages? Nope.
Let me type up a text version...
Dane!- Dane,
I just posted a similar question but I'm trying to accomplish something a bit different. But here's what I've learned from searching the last few weeks (I'ma bit slow)
1)Group policy preferences for power configuration only works when set up on the user configuration side. (I've found that true for XP anyways)
2)Power managment settings can only be edited/modified if you are a member of the admin or power users group. Since the power settings are applied thru the user configuration side of the policy, it gets applied with user credentials = failure if not admin or power user (but reports success in rsop????)
So I changed the following file and keys in the same policy un the computer config/windows settings/security settings/-
file system/
%SystemRoot%\system32\powercfg.cpl
registry settings/
MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Controls Folder\PowerCfg
USERS\.DEFAULT\Control Panel\PowerCfg
I just added domain users to the above items and full control permission.
I don't agree with the user configurations side for this as I'm trying to add it to laptops that never leave the office, but these users also use regular workstations and I would prefer not to have these settings applied there. But it is the only way I have beenable to get a power scheme to work. I still can't get the power options (close lid, press sleep button, etc) to work.
Good luck and I hope it helps!
Tom No. I thought it was fixed, but when I came in this morning both monitors were off.
Can I attach screen shots in these messages? Nope.
Let me type up a text version...
Dane!
Ok, from the to.
Left Pane
Group Policy Management-
Forest: corp.mydomain.org
+ Default Domain Policy
+ Domain Controllers
- MonitoringComputers
--MonitoringGPO-- (highlighted)
....
Right Pane
Settings tab,
Computer Configuration (Enabled)
Policies
Administrative Templates
Policy definitions (ADMX files) retrieved from the local machine.
System/Power Management
Policy Setting Comment
Select an Active Power Plan Enabled
Active Power Plan: High Performance (Maybe this is the problem?)
System/Power Management/Button Settings
Policy Setting Comment
Select the lid action (On Battery) Enabled
Lid Switch Action Take no action
Select the lid action (Plugged In) Enabled
Lid Switch Action Take no action
Select the Power Button Action (On Battery) Enabled
Power Button Action Shutdown
Select the Power Button Action (Plugged In) Enabled
Power Button Action Shutdown
Select the Sleep Button Action (On Battery) Enabled
Sleep Button Action Take no action
Select the Sleep Button Action (Plugged In) Enabled
Sleep Button Action Take no action
Select the Start Menu Power Button Action (On Battery) Enabled
User Interface Sleep Button Action Shutdown
Select the Start Menu Power Button Action (Plugged In) Enabled
User Interface Sleep Button Action Shutdown
System/Power Management/Hard Disk Settngs
Policy Setting Comment
Turn Off the Hard Disk (On Battery) Disabled
Turn Off the Hard Disk (Plugged In) Disabled
System/Power Management/Sleep Settings
Policy Setting Comment
Allow Standby States (S1-S3) When Sleeping Disabled
(On Battery)
Allow Standby States (S1-S3) When Sleeping Disabled
(Plugged In)
Require a Password When a Computer Wakes Disabled
(On Battery)
Require a Password When a Computer Wakes Disabled
(Plugged In)
Specify the System Sleep Timeout (On Battery) Disabled
Specify the System Sleep Timeout (Plugged In) Disabled
Turn Off Hybrid Sleep (Plugged In) Disabled
Turn on Applications to Prevent Sleep Transitions Enabled
(On Battery)
Turn on Applications to Prevent Sleep Transitions Enabled
(Plugged In)
System/Power Management/Video and Display Settngs
Policy Settings Comment
Turn Off the Display (On Battery) Disabled
Turn Off the Display (Plugged In) Disabled
Extra Registry Settings
Display names for some settings cannot be found. You might be able to resolve this issue bu updating the .ADM files
used by Group Policy Management.
Setting State
SOFTWARE\Policies\Microsoft\Power\PowerSettings\ 1
A4B195F5-8225-47D8-8012-9D41369786E2\ACSettingIndex
SOFTWARE\Policies\Microsoft\Power\PowerSettings\ 1
A4B195F5-8225-47D8-8012-9D41369786E2\DCSettingIndex
Preferences
Control Panel Settings
Power Options
Power Options
Power Options (Windows XP) (order: 1)
Properties
Options
Prompt for password when computer resumes from standby Disabled
Enable Hibernation Disabled
Power Butons
When I close the lid of my portable computer Do nothing
When I press the power button on my computer Shutdown
When I press the sleep button on my computer Do nothing
Common
Options
Stop processing items on this extension if an error occurs on this item No
Remote this item when it is no longer applied No
Apply once and do not reapply No
Power Scheme (name: Always ON)
Always ON (order: 2)
Properties
Action Replace
Make this the active Power Scheme: Enabled
When computer is: Plugged In Running on batteries
Turn off monitor: Never Never
Turn off hard disks: Never Never
System Standby: Never Never
System Hibernation: Never Never
Common
Options
Stop processing items on this extension if an error occurs on this item No
Remove this item when it no longer applied (applied/applies typo?) No
Apply once and do not reapply No
User Configuration (Enabled)
Preferences
Control Panel Settings
Power Options
Power Options
Power Options (Windows XP) (order: 1)
Properties
Options
Always show icon on the taskbar Disabled
Prompt for password when computer resumes from standby Disabled
Enable Hibernation Disabled
Power Buttons
When I close the lid of my portable computer Do nothing
When I press the power button on my computer Shutdown
When I press the sleep button on my computer Do nothing
Common
Options
Stop processing items on this exntension if an error occurs on this item No
Run in logged-on user's security context (user policy option) No
Remote this item when it is no longer applied No
Apply once and do not reapply No
Power Scheme (name: Always ON)
Always ON (order: 2)
Properties
Action Replace
Make this the active Power Scheme Enabled
When Computer is: Plugged in Running on batteries
Turn off monitor: Never Never
Turn off hard disks: Never Never
System standby: Never Never
System Hibernates: Never Never
Common
Options
Stop processing items on this extension if an error occurs on this item No
Run in logged-on user's security context (user policy option) Yes
Remove this item when it is no longer applied No
Apply once and do not reapply No
Dang, that was a lot to type up....
Dane!- Dane,
I just posted a similar question but I'm trying to accomplish something a bit different. But here's what I've learned from searching the last few weeks (I'ma bit slow)
1)Group policy preferences for power configuration only works when set up on the user configuration side. (I've found that true for XP anyways)
2)Power managment settings can only be edited/modified if you are a member of the admin or power users group. Since the power settings are applied thru the user configuration side of the policy, it gets applied with user credentials = failure if not admin or power user (but reports success in rsop????)
So I changed the following file and keys in the same policy un the computer config/windows settings/security settings/-
file system/
%SystemRoot%\system32\powercfg.cpl
registry settings/
MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Controls Folder\PowerCfg
USERS\.DEFAULT\Control Panel\PowerCfg
I just added domain users to the above items and full control permission.
I don't agree with the user configurations side for this as I'm trying to add it to laptops that never leave the office, but these users also use regular workstations and I would prefer not to have these settings applied there. But it is the only way I have beenable to get a power scheme to work. I still can't get the power options (close lid, press sleep button, etc) to work.
Good luck and I hope it helps!
Tom Dane,
I just posted a similar question but I'm trying to accomplish something a bit different. But here's what I've learned from searching the last few weeks (I'ma bit slow)
1)Group policy preferences for power configuration only works when set up on the user configuration side. (I've found that true for XP anyways)
2)Power managment settings can only be edited/modified if you are a member of the admin or power users group. Since the power settings are applied thru the user configuration side of the policy, it gets applied with user credentials = failure if not admin or power user (but reports success in rsop????)
So I changed the following file and keys in the same policy un the computer config/windows settings/security settings/-
file system/
%SystemRoot%\system32\powercfg.cpl
registry settings/
MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Controls Folder\PowerCfg
USERS\.DEFAULT\Control Panel\PowerCfg
I just added domain users to the above items and full control permission.
I don't agree with the user configurations side for this as I'm trying to add it to laptops that never leave the office, but these users also use regular workstations and I would prefer not to have these settings applied there. But it is the only way I have beenable to get a power scheme to work. I still can't get the power options (close lid, press sleep button, etc) to work.
Good luck and I hope it helps!
Tom
Hello,
OK I went and deleted/changed things the way you suggest. I will wait and see if the monitors are on in the morning.
Thanks for your help!
Dane!Dane,
How'd it work? The only other thing I thought of is since this is one the user config side. After you set the policy/pref you would have to log on as a user in the OU that the policy was applied to. I don't know if this will refresh in the background, or if you leave these logged on all the time?
Thanks,
Tom
Same. Both screens are blank.Dane,
How'd it work? The only other thing I thought of is since this is one the user config side. After you set the policy/pref you would have to log on as a user in the OU that the policy was applied to. I don't know if this will refresh in the background, or if you leave these logged on all the time?
Thanks,
Tom
Please confirm what the Enforced? and Link? settings should be.
Dane!- Sorry Dane,
I am no expert, thats just what I had to do to make it work. I just have the link enabled, but not forced. Once I linked the policy to the user OU, this peice of it started to work. I'm still having problems with the power options side (close lid, power button, etc.) but the scheme seems to work great.
Sorry, but thats what worked for me.
Tom Sorry Dane,
I am no expert, thats just what I had to do to make it work. I just have the link enabled, but not forced. Once I linked the policy to the user OU, this peice of it started to work. I'm still having problems with the power options side (close lid, power button, etc.) but the scheme seems to work great.
Sorry, but thats what worked for me.
Tom
Don't be Sorry! If it worked for you, it should work for me. I noticed on my last GPRESULT that it was showing the policy was the Default Domain Policy... Why does it show that and not the one I made for my OU? I think there is 1 of 2 things wrong here...
Either I screwed up making the new OU, or I did not assign the GPO to the OU.
I'm slooo too. ;)
Will try blowing away the OU and recreating it which will force me to re-assign the GPO to the OU...
Dane!- How about this approach -
Leave the Monitor machines in the computer OU but deny the GPO being applied to them... I think that is how I had it working before. Just used local settings on the machine/user account. How do I do this?
Dane! Yea, I don't know about that.
I assume you could remove the linkfrom the OU, oh you said it was the default domain policy. Can you remome the setting from that policy and make a new policy if there are other places you would like to try and apply it.
Then on the local workstation open gpedit.msc and make the changes there. This will configure the local policy, However, if you don't remove the settings from the default domain policy, those will overwrite the settings from the local policy(well there is a chance they will if it ever works right). But still I could only get them to work when I added the scheme settings to the user configuration side.
Again, Good luck!
Tom- I was using Group Policy Modeling Wizard...
MonitoringComputers on Monitoring Computers is what is showed in the left pane.
Anyway, I navigated down to the Settings tab, Preferences, Control Panel Settings, Power Options and it shows this:
An error has occurred while collecting data for Power Options.
The following errors were encountered: An unknown error occurred while data was gathered for this extension. Details: Invalid class
Not in that font and point size, but you get the idea.
I also noticed when I set the Power Options locally through the control panel, everything stays on until the GPO gets applied. I create a new power scheme through Control Panel and name it "This1" Apply, and later it gets replaced with the Laptop setting and all options show "Never" like I want it to, they are just ignored. The "This1" scheme is also gone/deleted.
Could part of the problem be there is no "Always On" power scheme on the XP machine... ?? No idea where it went!
Dane! - Dane,It is starting to sound like you have some issues with the GPO templates. Are you using a single machine to edit the GPOs? what OS is it? Do you have a central store for GPO templates?Guy
Dane,
It is starting to sound like you have some issues with the GPO templates. Are you using a single machine to edit the GPOs? what OS is it? Do you have a central store for GPO templates?Guy
Yeah, I got issues alright. ;) Think I am out in Left field here. No idea what you meant about GPO Templates, until this weekend I checked out the GPO Virtual Lab. There are templates in some folder under Windows, ADMX and ADML files... The lab didnt say what they were for though. Anyway, the lab had me create some power setttings for use with a Vista machine using the lcoal policy editor and somehow those settings got pickup up by the Domain, even though it told me NOT to save the changes.
I am starting to get frustrated now. This must be a bug.
Went to www.microsoft.com, typed in Group Policy in the search field. First hit - Windows Server Group Policy Home... Worked my way down to the Virtual Lab link; reading every document before that -
TechNet Virtual Lab: Managing Windows Server 2008 Beta 3 and Windows Vista Using Group Policy Spent the next 3 hours working on this lab (had to start over due to time constraints).
To answer your question, I am using Windows 7 to run the Group Policy Editor on a Windows 2008 R1 domain, trying to set power settings on an XP machine.
Just today I logged into the XP machine and ran the Local Policy editor, could not find any settings for power saving to disable.
Blew all GPO power settings away 3 days ago, just recreated them again for XP, GPUPDATE /FORCE reboot, no change.
I am now installing Vista on these machines to see if this works better; just hope the auto login stuff still works!
ALL I WANT TO DO IS LEAVE THE MONITOR ON!!!!!!!!!
Awe, Vista install just blue screened the machine. Wonderful. The monitor is staying on now. heh
Dane!- Ok, I have to start all over on Monitor2.
In fact, I will start over completely.
I've blown away the MonitoringMachines GPO and OU in the domain.
Someone please give me a step by step, assume this computer will be running XP Pro.
Dane! - Here's what I would suggest for a step by step:1. Create a new GPO for the desired settings.2. Configure only the power settings that weren't working before (the scheme settings to prevent the monitors from going to sleep). Based on okon3's comments it might make sense you can work with user settings only, but I would suggest testing each (assuming you have dedicated user accounts) and even both to see if you can get it work.3. If you prefer to move the users and computers to a specific OU, you can, but I typically would tend to create a group with the computer and user accounts and then use security filtering on a GPO linked to the highest OU level that includes both the users and computers (or domain if necessary). Remember that user settings must be applied to users and computers settings to computers when you link and use security filtering.4. If the settings are not applied, review the GPO event logs and detailed debug logs to check for a problem or reason.5. If the settings apply successfully, back up the GPO and then add more settings and keep testing.In case you haven't found this already in your search, here is a step-by-step about configuring the actual GPO with a lot of detail: http://blogs.technet.com/grouppolicy/archive/2009/09/30/configuring-a-power-plan-with-group-policy-preferences-by-alan-burchill.aspxLet me know if you'd like more detailed information about any of the steps.Guyp.s. if you're still having the issue deleting the OU, right click the OU, open properties and uncheck the checkbox to protect the object from deletion.
- Marked As Answer byDaneDaneDane Wednesday, November 18, 2009 4:35 AM
- Hi again,
Before I begin, I want to update where I am at currently:
1) Monitor2 machine has been formatted / fresh install of XP Pro 32bit.
2) Monitor1's computer account has been placed back into the default Computers OU.
3) "MonitoringComputers" OU has been deleted.
4) Monitor2's computer account has been deleted.
5) "MonitoringComputers" GPO has been deleted.
This morning -
1) Re-created the OU in Group Policy Management using my Windows 7 PC (right-clicked on "corp.mydomain.org" and selected "New Organizational Unit").
2) Moved Monitor1's computer account back into the new OU I created via Group Policy Manager on my Windows 7 PC. The OU is named "MonitoringComputers"
3) Set the OU to "Block Inheritance"
4) Joined computer Monitor2 to the domain.
5) Moved the "Monitor2" computer account using Active Directory Users and Computers on my Windows 7 PC to the new OU, "MonitoringComputers".
6) Rebooted both Monitor1 and Monitor2 computers.
7) Issued GPUPDATE /FORCE on both computers.
8) Checked power settings -> Set monitor2 to "Always On". On monitor1 there was no "Always On" power scheme so I created one and set it to that power scheme.
9) Issues a GPUPDATE /FORCE on both computers again...
Monitor2 stays on "Always On" but the "Turn Monitor Off" gets set to 20 minutes, despite what I set it to. (it matches what the Default Domain Policy is set for).
Monitor1 goes back to "Portable/Laptop", with all settings set to "Never" and the monitor goes blank (not sure how long before it goes blank).
Why the different between the 2 PCs? Even though I have "Block Inheritance" set, why does the default domain policy still get applied? Why does Monitor1 over write my "Always On" scheme and insist on setting it to "Portable/Laptop" and deleting my "Always On" setting?
Let me check GPRESULT...
Monitor1 shows Default Group Policy being applied on both the Computer and User settings.
Monitor2 shows same thing.
Think I will stop here and wait for some responses before proceeding with the steps above.
Dane! - A few questions:1. Is the default domain policy enforced (right click and check setting)?2. Open GPMC, select the MonitoringComputers OU and select the Group Policy Inheritence tab, which GPOs show there?3. Which GPOs show as applied when running GPRESULT on monitor2?For monitor2, it sounds like we just need to figure out why its still getting the default domain policy. For Monitor1, it sounds like there's another source changing settings. If we can get monitor2 working, you may want to consider rebuild monitor1 if that's possible (I don't like suggesting this course of action, but it might take less time than other options).Guy
- Marked As Answer byDaneDaneDane Wednesday, November 18, 2009 4:35 AM
- A few questions:1. Is the default domain policy enforced (right click and check setting)?2. Open GPMC, select the MonitoringComputers OU and select the Group Policy Inheritence tab, which GPOs show there?3. Which GPOs show as applied when running GPRESULT on monitor2?For monitor2, it sounds like we just need to figure out why its still getting the default domain policy. For Monitor1, it sounds like there's another source changing settings. If we can get monitor2 working, you may want to consider rebuild monitor1 if that's possible (I don't like suggesting this course of action, but it might take less time than other options).Guy
Morning,
1. Yes
2. 1 (Enforced) Default Domain Policy corp.mydomain.org Enabled None
3. Default Doman Policy.
Also, just wanted to point out Monitor1 did NOT have the Client Side GPO Windows Update installed until yesterday morning. Monitor2 had them installed though.
I will turn off Enforced and see what happens.
Ok, with Enforced turned off GPRESULT shows no applied GPO on the Computer settings but shows Default Domain Policy on the User Settings. This is the same on both Monitor1 and Monitor2. I set the monitor off setting to Never again, let's see what happens.
Thanks,
Dane!- Marked As Answer byDaneDaneDane Wednesday, November 18, 2009 4:35 AM
- The monitors are staying on!!!!!!!!!!!!!!!!!!!
Dane!- Unmarked As Answer byDaneDaneDane Wednesday, November 18, 2009 4:35 AM
- Marked As Answer byDaneDaneDane Wednesday, November 18, 2009 4:35 AM
The monitors are staying on!!!!!!!!!!!!!!!!!!!
Dane!
Hi,
Small update here, the monitors continue to stay on!
So I think my problem was having the "Enforced" setting set at the beginning. But, deleting the OU and recreating the GPO really helped narrow down the problem.
Thank you all for your help!
Dane!- Marked As Answer byDaneDaneDane Wednesday, November 18, 2009 4:36 AM
