removing usb device without administrator rights?

A

Abertech

I want users to use USB pen drives but don't want these users to have
administrator rights over the machine. I'm using Windows 2000/
Novell.

Plugging in the pen drives is no problem - they are recognised ok and
the drive appears in Windows Explorer.

The problem is that when trying to open the usb icon in the taskbar
(the little green arrow icon), as you are supposed to in order to
safely
remove the device, windows displays a message saying
"Restrictions - This operation has been cancelled due to restrictions
in effect on this computer...". So users are unable to stop the
device.
How can I get users to be able to disconect their pen drives properly?
 
A

Abertech

Abertech said:
I want users to use USB pen drives but don't want these users to have
administrator rights over the machine. I'm using Windows 2000/
Novell.

Plugging in the pen drives is no problem - they are recognised ok and
the drive appears in Windows Explorer.

The problem is that when trying to open the usb icon in the taskbar
(the little green arrow icon), as you are supposed to in order to
safely
remove the device, windows displays a message saying
"Restrictions - This operation has been cancelled due to restrictions
in effect on this computer...". So users are unable to stop the
device.
How can I get users to be able to disconect their pen drives
properly?


Anyone have any ideas on this?
 
M

Michael Bednarek

I want users to use USB pen drives but don't want these users to have
administrator rights over the machine. I'm using Windows 2000/
Novell.

Plugging in the pen drives is no problem - they are recognised ok and
the drive appears in Windows Explorer.

The problem is that when trying to open the usb icon in the taskbar
(the little green arrow icon), as you are supposed to in order to
safely
remove the device, windows displays a message saying
"Restrictions - This operation has been cancelled due to restrictions
in effect on this computer...". So users are unable to stop the
device.
How can I get users to be able to disconect their pen drives properly?

Have you tried the command line program DevEject (1.0 2003 c't/Matthias
Withopf), from <ftp://ftp.heise.de/pub/ct/listings/0316-208.zip>?

Let us know if this works.
 
A

AberTech

Michael Bednarek said:
Have you tried the command line program DevEject (1.0 2003 c't/Matthias
Withopf), from <ftp://ftp.heise.de/pub/ct/listings/0316-208.zip>?

Let us know if this works.

Hi,

Tried that, still getting the restrictions message when clicking on unplug
or eject a device and once the pen drive is removed the other message about
how its unsafe to do so.

I've seen messages on other forums about this and I just can't beleive there
isn't a solution to it.
 
M

Michael Bednarek

Hi,

Tried that, still getting the restrictions message when clicking on unplug
or eject a device and once the pen drive is removed the other message about
how its unsafe to do so.

I've seen messages on other forums about this and I just can't beleive there
isn't a solution to it.

I don't follow. When DevEject is used, there is nothing to click, it's just a
command. If I run the following command:

DevEject -EjectName:"USB Mass Storage Device"

I get the following response:

DevEject 1.0 2003 c't/Matthias Withopf

Ejecting 'USB Mass Storage Device' [USB\VID_1005&PID_B113\070B00002490040]...ok.
1 device(s) ejected.

The system has removed the USB stick just as double-clicking the "Unplug or
Eject Hardware" icon and subsequent "Stop" would.

It takes a while to get DevEject to work: for a start, its command line
switches are case-sensitive, and you have to enumerate the exact device
name or ID first. Ejecting by drive letter is often impractical as that
can of course change. Also, DevEject uses single quotes for its output
but requires double quotes for its input.

Good luck.
 
A

AberTech

Michael Bednarek said:
Hi,

Tried that, still getting the restrictions message when clicking on unplug
or eject a device and once the pen drive is removed the other message about
how its unsafe to do so.

I've seen messages on other forums about this and I just can't beleive there
isn't a solution to it.

I don't follow. When DevEject is used, there is nothing to click, it's just a
command. If I run the following command:

DevEject -EjectName:"USB Mass Storage Device"

I get the following response:

DevEject 1.0 2003 c't/Matthias Withopf

Ejecting 'USB Mass Storage Device' [USB\VID_1005&PID_B113\070B00002490040]...ok.
1 device(s) ejected.

The system has removed the USB stick just as double-clicking the "Unplug or
Eject Hardware" icon and subsequent "Stop" would.

It takes a while to get DevEject to work: for a start, its command line
switches are case-sensitive, and you have to enumerate the exact device
name or ID first. Ejecting by drive letter is often impractical as that
can of course change. Also, DevEject uses single quotes for its output
but requires double quotes for its input.

Good luck.

I got this to work and it works a treat. Thank you Michael.

Our users dont have access to a CLI but I found that they can run it as a
batch file from a shared area without giving them too many access rights.

Death to floppy disks!!!!
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top