Hi, I am a system administrator. We have a Windwos 7 Enterprise 32 bit edition. I found that one of the user changed Power option from Balance mode to Power saver mode. How to I identify in event viewer, to find user, who have changed the power options. Regards, Boopathi S

These changes are not tracked by the eventviewer to my knowledge. Users can freely select the power plan they desire. But they cannot change the advanced settings inside the power plan. Changing the powersettings can be done with a normal userprofile. The values for the powerplan that is selected is stored in HKCU\Control Panel\PowerCfg. If you want to see when it changes, you could enable auditing on that key.