Windows Power Policy Management

⌘K

Windows Power Policy Management: 4 Steps to Deploy and Enforce Settings with Zecurit

Windows power policy management is one of the most effective, and most overlooked ways IT teams can reduce energy costs and ensure consistent device behaviour across the organisation. Zecurit’s Windows power policy management module lets administrators create, configure, and deploy power settings to all enrolled Windows endpoints through a centralised profile system. Instead of relying on users to select the right power plan, you define the Windows power policy once and Zecurit enforces it automatically across your entire device fleet at every check-in.

Learn more about Windows built-in power plan settings from Microsoft to understand the foundation on which Zecurit’s Windows power policy management is built.

What is Windows Power Policy Management in Zecurit?

A Windows power policy in Zecurit is a configuration profile that controls how a managed Windows device uses energy, covering display brightness and timeout, sleep and hibernate thresholds, processor performance states, battery action thresholds, hard disk spin-down timing, and advanced settings such as Fast Startup, USB Selective Suspend, and PCI Express Link State Power Management. Zecurit’s Windows power policy management system enforces all of these settings remotely, silently, and consistently.

Step 1 : Create a New Profile for Windows Power Policy Management

How to Start Windows Power Policy Management in Zecurit

Go to Manage → Configurations → Create Profile. Enter a Profile Name and an optional Description, then click Continue. Profiles act as containers for one or more configuration policies — Windows Power Management is one of the available policy types within the profile.

Windows Power Policy Naming Best Practices

Use descriptive names that reflect the target audience or power intent, such as “Office Workstations – Balanced Power Policy,” “Laptops – Power Saver,” or “Conference Room Displays – Always On.” Consistent naming makes future Windows power policy management and reporting significantly easier.

Step 2 : Configure Your Windows Power Policy Settings

Choosing a Base Power Plan for Your Windows Power Policy

Zecurit’s Windows power policy management offers four base plans: Balanced (recommended for most office PCs), High Performance (for workstations needing maximum CPU throughput), Power Saver (ideal for laptops on battery), and Create Custom (build a Windows power policy from scratch). Selecting a base plan pre-populates sensible defaults you can then override section by section.

Display Settings in Your Windows Power Policy

Configure how long the display stays on when plugged in versus running on battery, set display brightness percentages separately for AC and battery modes, and enable or disable Hybrid Sleep as part of your Windows power policy management configuration.

Sleep and Hibernate Settings

Define inactivity periods before the device sleeps and hibernates for both plugged-in and battery states. Set Hibernate After to 0 to disable hibernation entirely within the Windows power policy. Enable Wake Timers if scheduled tasks should be able to wake the device from sleep.

Hard Disk, Processor, and Battery Settings

Control hard disk spin-down timing, set Minimum and Maximum Processor State percentages, and choose a System Cooling Policy (Active or Passive). In the Battery section, define Critical, Low, and Reserve Battery Level thresholds and assign appropriate actions — Hibernate, Sleep, Shutdown, or Do Nothing — for each threshold as part of a complete Windows power policy management setup.

Advanced Windows Power Policy Settings

Toggle Require Password on Wake, Enable Fast Startup, and Allow USB Selective Suspend. Advanced users can enter custom Powercfg commands to apply Windows power policy settings beyond the standard Zecurit UI. These commands execute after all standard settings are applied — use with care.

Step 3 : Save or Publish the Windows Power Policy Profile

Click Save to preserve your current Windows power policy settings within the editor. Use Save as Draft to keep an unpublished version for review, or click Publish to make the Windows power policy active and ready for association with devices.

Step 4 : Associate the Windows Power Policy with Devices or Groups

After publishing, navigate to Manage → Groups and Devices → Actions → select configuration profile for Windows power policy profile, and associate it with the relevant device groups or individual devices. The Windows power policy settings are automatically applied during the next device check-in, no manual intervention on the endpoint is ever required.

Windows Power Policy Management Use Cases

Enforcing After-Hours Energy Savings for Desktops

Create a Power Saver Windows power policy with a 10-minute sleep timeout and hibernate after 30 minutes, ensuring desktop PCs do not run overnight during periods of inactivity.

Optimising Battery Life for Laptops and Field Workers

Apply a dedicated Windows power policy with lower display brightness, shorter display timeout, and Passive cooling on battery mode to maximise runtime for employees away from power outlets.

Keeping Conference Room Displays Always Active

Create a custom Windows power policy for shared conference room devices with an extended display timeout and no automatic sleep, preventing screens from blanking mid-presentation.

Frequently Asked Questions : Windows Power Policy Management

What happens if a user manually changes their Windows power policy?

At the next Zecurit device check-in, the configured Windows power policy profile is re-enforced, automatically overriding any manual changes made by the user.

Can I apply different Windows power policies to laptops and desktops in the same group?

Yes. Create separate Windows power policy profiles for each device type and associate them with distinct device groups. Zecurit supports granular association at both the group and individual device level.

Do custom Powercfg commands support all Windows power settings?

Yes. The Custom Powercfg Commands field accepts any valid powercfg command-line argument, extending your Windows power policy management capabilities beyond the standard Zecurit UI options.

How can we help?