One of the key advantages to a management suite is that you can schedule maintenance to happen automatically and during “off” hours. This means that the computer needs to be running and the management system needs to have user permissions and access through the Windows Firewall to operate correctly. These settings include choosing the correct Power Management Plan, making some additional adjustments to Power Management, and making the necessary Group Policy changes.

The Easy Way

The steps Below can be done with some simple commands and even automated by script with the proper preparation.

Power Management Settings

Windows has a built-in Power Management API and utility program called “powercfg”. After manually configuring the first computer you can export the configuration to a “.pow” file and setup the remaining computers with a simple command line. See THIS PAGE for detail on how the configurations are exported or Imported.

Here is the .pow file that results from the settings below: highperformance.pow

Group Policy Settings

Most Group Policy settings are stored in the registry. So in many cases you can make Group Policy changes with registy edits. Yes I know “VERY DANGEROUS” and May require a reboot to take effect. SO BE CAREFULL!!

Here are the settings for the Windows Firewall: windowsfirewall.reg

Because the settings for non-domain computers involve creating a local user and then granting permissions for that user in Group Policy the registry settings are not simple. Since non-domain configurations will usually involve few computers it is easier to just use the gpedit.msc tool to make these settings.

The Long Way

Power Management Settings

  1. Open the Control panel, find and open the Power Manament icon.
    • OR open the start menu and type
  2. Choose the “High Performance” plan. By default most of the available plans are hidden. Look for the Label “Show additional Plans” and click the drop down to see all the choices.
  3. Once the “High Performance” plan is selected find “Change Plan Settings” and/or “Change Advanced Power Settings”. This will allow you to make additional adjustments to the Power Management Plan.
  4. Make the following changes (The following apply to “Plugged In” AND “On Battery”)
    • Hard Disk » Turn off Hard Disk: set to 0 (zero means never turn off.)
    • Power Buttons and Lid
      • Lid Close Action: Shut Down
      • Power Button: Shut Down
      • Sleep Button: Do Nothing

Command Line

The Power Management Plan can also be set from an elevated Windows command prompt with the following:

for /f "tokens=4,5 skip=1" %%a in ('powercfg -l') Do (if "%%b"=="(High" set pquid=%%a)
powercfg -s %pquid%
powercfg -l
This method only sets the base plan, the “additional edits” must still be configured manually.

Group Policy Settings

Domain Member

  1. Open GPEDIT.MSC (You will need to add gpedit if you are on a 'Home' version of Windows.)
  2. In: Computer Configuration > Administrative Templates > Network > Network Connections > Windows Firewall
    • For Domain Profile AND Standard Profile enable the following:
      • Allow ICMP Exceptions and check the box for Allow Inbound Echo Request
      • Allow inbound file and printer sharing exception
      • Allow inbound remote administration exception
      • Allow inbound remote desktop exception

NON-Domain member

In ADDITION to the domain settings above …

  1. Create an Administrator user named 'KCNOC'. (Use “standard” password.)
  2. Open GPEDT.MSC (You will need to add gpedit if you are on a 'Home' version of Windows.)
  3. In: Computer Configuration > Windows Settings > Security Settings > Local Policy > Security
    • For each of the following:
      • DCOM: Machine Launch Restrictions
      • DCOM: Machine Access Restrictions
    • Edit Security…” add the KCNOC user granting full permissions.

Krista User Icon

Last modified:: 2016/03/19 16:03