Hello. Ive been trying to get this working in order prevent the users from
using the usb mass storage driver. Trying to do it as user logon script, not
computer.

Actually everything works fine when an admin logs in. The logon script runs,
the bat file calls the regedit and everything is great. When a user account
logs on though, I get the following:
"Unable to set sesecurityprivilege: this privledge may be required. Access
is denied" and the reg import doesnt occur.

setup as:
% ~dp0subinacl.exe /verbose=1 /keyreg
"hkey_local_machine\system\currentcontrolset\services\usbstor" /grant=users=f

regedit.exe
"\\domainname\SysVol\domainname\Policies\{875C244C-A130-4D3F-87E4-5DD8EAF22651}\User\Scripts\Logon" usbstop.reg



What am I missing here? Whenever any account other than an admin tries you
get the sesecurityprilege error. I tried changing also to grant=everyone=f ,
and also sgrant.

Thanks,
Carito

"Carito" <(E-Mail Removed)> wrote in message
news:C90ECB5E-E904-45B6-9A63-(E-Mail Removed)...
> Hello. Ive been trying to get this working in order prevent the users from
> using the usb mass storage driver. Trying to do it as user logon script,
> not
> computer.
Why does it matter; what are you trying to accomplish here? Maybe there is
another solution or workaround that is effective.
>
> Actually everything works fine when an admin logs in. The logon script
> runs,
> the bat file calls the regedit and everything is great. When a user
> account
> logs on though, I get the following:
> "Unable to set sesecurityprivilege: this privledge may be required. Access
> is denied" and the reg import doesnt occur.
>
> setup as:
> % ~dp0subinacl.exe /verbose=1 /keyreg
> "hkey_local_machine\system\currentcontrolset\services\usbstor"
> /grant=users=f
>
> regedit.exe
> "\\domainname\SysVol\domainname\Policies\{875C244C-A130-4D3F-87E4-5DD8EAF22651}\User\Scripts\Logon"
> usbstop.reg
>
>
>
> What am I missing here? Whenever any account other than an admin tries you
> get the sesecurityprilege error. I tried changing also to grant=everyone=f
> ,
> and also sgrant.