Allow restricted users ability to add new hardware

[Guest]

Our students are restricted users although they need to be able to add flash
drives for storage. I have tried allowing domain users the right to load and
unload drivers within the security policy but this hasn't worked.

How do you allow a restricted user the ability to add a new hardware device
via Group Policy?

Any suggestions would be appreciated.

 

[Steven L Umbach]

You need to make sure that the hardware device is using drivers that are
digitally signed and then the user should be able to do the installation via
a "server side" installation. The link below explains this more about the
same thing with USB printers. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;326473

Windows XP supports two methods to install a Plug and Play device:
server-side installation and client-side installation. Both methods can be
used on a single computer.

Windows XP uses server-side installation when you are not required to
provide additional information to install your Plug and Play printer. If the
manufacturer of your device provides complete preinstallation information in
the .inf file and the .pnf file, and the files are trusted (digitally
signed), Windows XP can use server-side installation to install the device.
Server-side installations do not require intervention by an administrator.

Windows XP uses client-side installation when you have to provide additional
information to install your Plug and Play printer. In client-side
installation, you can select the driver files, the path to the files, and
other options. However, when Windows XP uses client-side installation, you
must provide administrator credentials.