Jump to content
Strawberry Orange Banana Lime Leaf Slate Sky Blueberry Grape Watermelon Chocolate Marble
Strawberry Orange Banana Lime Leaf Slate Sky Blueberry Grape Watermelon Chocolate Marble

MSFN is made available via donations, subscriptions and advertising revenue. The use of ad-blocking software hurts the site. Please disable ad-blocking software or set an exception for MSFN. Alternatively, register and become a site sponsor/subscriber and ads will be disabled automatically. 


Sign in to follow this  
D8TA

[help] USB devices for non-admins

Recommended Posts

I am trying to prevent over 100 laptop users from being Admins on the laptops but the USB devices are becoming a show stopper. I found a tool on Novell's website,

This tool works great and allows the USB device to function however the user's still receive the Windows Found New Hardware dialog box along with a login box for an Admin to log into. If the user clicks Cancel they receive a message that they don't have rights to use this device. After they clear out of these messages they can utilize the USB device until they restart. Is there a way to remove these messages so that they can use the device and not recieve these non-admin messages? Once an Admin logs in and the device is recognized under an Admin user they never receive the message again until a new device is plugged in. I have searched for two weeks and cannot find a solution but I hate to have to make them Admins on the laptop. Any other suggestions or ways to remove these messages that Windows presents?

The notebooks are HP nc6400 running Windows XP sp2 in an Active Directory domain. I looked through some Group Policy settings but still cannot find a resolution to my problem. Like I stated above, the device works using the script on Novell's website but the user still receives an annoying message which is not something management will accept. I mentioned the security aspect but still no use. If I cannot make it so user's can install and use USB devices without receive any messages I may have to make them Admins.

What are others doing to prevent making user's Admin on their PCs?

Any suggestions, solutions or comments would be greatly appreciated.

Thanks!

Share this post


Link to post
Share on other sites

Interesting... I'm an admin over a 800 user network and my users have no problem using jump drives. And let me tell you AD is locking them down beyond belief. They have no admin or power user rights what so ever. I personally have not seen this box you speak of which requires an admin logon to install the new deive. Let me read up on it and see if I can find a reason...

Share this post


Link to post
Share on other sites

I'll try to see if I can get some screenshots tomorrow when I get in the office. Do you happen to have a template or something that you are using for AD?

Share this post


Link to post
Share on other sites

Nope, don't have a template sorry. The majority of the AD settings are company wide across all our properties and implemented and audited by our corporate IT.

Share this post


Link to post
Share on other sites

Here is a screenshot of the two messages I receive. When I plug in the device and it is recognized and then when I click Cancel I receive the second one about not having permission. All the USB devices work I just would like to prevent these messages from appearing for the user. I also checked my local security policy and Admins, Power Users and Users have rights to load and unload device drivers so I cannot figure out why Windows has to display this messages.

Any other comments or suggestions?

post-44423-1167915159_thumb.png

post-44423-1167915169_thumb.png

Share this post


Link to post
Share on other sites

Well, actually, though I never had the occasion of using it, I had found that novell link a while ago, while trying to help another member here:

http://www.msfn.org/board/index.php?showtopic=83032

But, at least from what is on the Novell site, this has been designed for Mass Storage Devices, while you seem like applying it to HID Devices (Mouse).

So maybe something needs to be changed in source regarding references to "classes" of hardware devices.

jaclaz

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...