HOWEVER, the affected machines are still missing sleep, even with DeviceGuard turned off in the BIOS.Īnyone familair with DeviceGuard and these Security Baselines?
Now newly imaged machines no longer lose sleep after the initial task sequence resart Standby states when sleeping while plugged in Security Baseline for Windows 10 and later > Properties > Settings > Power > Standby states when sleeping while on battery > disabled It would seem DEVICeGUARD via Endpoint Security DEFENDER baselines is removing/disabling SLEEP from these machines.ĭigging thru the baselines we found it by happenstance:Įndpoint > Endpoint Security > Security Baselines > In other words, now we're cooking with oil.
** Also after burning the midnight oil all weekend, I think we have root cause, but still no real solution. Thank you, the hibernate trick is better than nothing, at least thats a way for our end users to "sleep" their machine. When the issue was just on a handful of machines I assumed corrupt O/S, but now thats its on 133 and climbing, I have to think something else is going on.Īppreciate any other input or direction here. I also went thru an export of our domain GPO settings and I see nothing in there related to SLEEP or power management either. I went to local group policy editor on affected machines and verified and confirmed that the entry: " Show sleep in the power options menu" was set to enabled - no change.
The machines that have Sleep available do not seem to have any extra subfolders or keys available, and again all the values are the same on both machines. Furthermore I compared the folders/keys to a working machines entries and they are the exactly the same. ^^ I went thru each folder and subfolder and no obvious SLEEP in the menu keys present. Hope this helpsĬomputer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Power\PowerSettings You can always create a registry mod GPO.
0 indicates the power configuration is hidden and 1 will enable the power setting to be visible in the power settings configuration area in control panel. Friendly name and description to describe which is which and an attribute key for if the power setting is enabled. Text Lockout wrote: Go to the registry location below and look through the different subfolders.