Administrator Login box pop's up when USB pen plugged in

[stratisphere]

Hi All,

We've got a problem here which seems to be limited to only nLite builds.

We have a network here, standard xp clients with 2k3 domain controller. All machines are controlled via GPO's and MSI's etc etc.

Basically on machines built with nLite, when a user (non administrator) plugs a USB storage device in, it pop's up a dialog asking for administrator authentication. If they cancel it windows brings up a message about failing to install the hardware... yet a few seconds later it comes up in my computer and works fine from then.

On other machines which we build with our official XP pro media, the problem doesnt exist, users can plug the pens in no problem. On standard machines (media built) drivers are installed manually after the build and then joined to the domain.

On nLite machines, we have our whole driver cache streamlined into the build... which works perfect (in the way that the drivers are picked up and used and devices are installed).

So far, i've tried several options:

- Changing Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options -> Devices: Allowed to format and eject ermovable media to "Administrators and Interactive Users" (default is "Administrators")

I have read that adding "Authenticated Users" to Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> User Rights Assignments -> Load and unload device drivers would solve it... but normal build machines only have Administrator in that and they work fine (Resultant Set of Policies show that setting).

I've also read that it could be due to the fact that nLite re-packages the drivers and therefore isnt signed anymore? Is this true? If so, is there a way around it?

I'm running out of ideas... any thoughts anyone?

[s-moe]

I have the same Problem, and also no Idea!!!!

[windoz]

Hi,

Where I work, we too have been experiencing this problem. I accidently stumbled across the fix when working on another problem.

The following is what we run in a .bat when we are experiencing this problem and it seems to resolve it.

net stop cryptsvc

ren %systemroot%\system32\catroot2\Edb.log *.tst

ren %systemroot%\System32\Catroot2 oldcatroot2

net start cryptsvc

pause

exit

Let me know if this works for you.

AA. (HTC)