Allow Win2K User Account to Install USB Devices?

[Toni]

I have a Windows 2000 Power user account. I'd like to be able to install drivers (ex:
plug in a USB scanner) without having to reboot into an administrator-level account.

What permissions can I add to my Power User account so that it can install new USB
devices?

Or, is there a way I can do an admin Run As... to allow the drivers to be installed?

Thanks!

Toni

 

[John John (MVP)]

In the Group Policy:

Computer Configuration\
Windows Settings\
Local Policies\
User Rights Assignment\

Load and unload device drivers.

John

 

[Zaphod Beeblebrox]

In the Group Policy:

Computer Configuration\
Windows Settings\
Local Policies\
User Rights Assignment\

Load and unload device drivers.

Does this work differently in Windows 2000 than it does in Windows XP?
The reason I ask is because of http://support.microsoft.com/kb/326473.
Although it focuses on PNP printer installations, it applies to all PNP
driver installations. One of the key points brought out in this article
is the true nature of Load and unload device drivers, and the fact that
ONLY Administrators have a high enough ACL to make persistent changes to
the computer, which includes installing new hardware drivers. My
experience with both XP and Vista bears this out, but I don't know how
Windows 2000 handles it and don't have a test machine here at work to
verify it one way or the other.

 

[John John (MVP)]

Does this work differently in Windows 2000 than it does in Windows XP?
The reason I ask is because of http://support.microsoft.com/kb/326473.
Although it focuses on PNP printer installations, it applies to all PNP
driver installations. One of the key points brought out in this article
is the true nature of Load and unload device drivers, and the fact that
ONLY Administrators have a high enough ACL to make persistent changes to
the computer, which includes installing new hardware drivers. My
experience with both XP and Vista bears this out, but I don't know how
Windows 2000 handles it and don't have a test machine here at work to
verify it one way or the other.

Windows 2000 also has a policy just for printer drivers.

John

 

[Toni]

Thanks!

In the Group Policy:

Computer Configuration\
Windows Settings\
Local Policies\
User Rights Assignment\

Load and unload device drivers.

John

 

[Zaphod Beeblebrox]

Windows 2000 also has a policy just for printer drivers.

Presumably you are referring to the Security Option "Devices: Prevent
users from installing printer drivers" which only affects installing
printer drivers as a part of adding a network printer, and doesn't
affect Power Users in any case. I still don't think that Windows 2000
is any different than Windows XP when if comes to allowing
non-administrators to install drivers, regardless of the load and unload
drivers policy. Hopefully the OP will report back with his findings.

 

[John John (MVP)]

You're welcome.

John

Thanks!

...

 

[John John (MVP)]

Presumably you are referring to the Security Option "Devices: Prevent
users from installing printer drivers" which only affects installing
printer drivers as a part of adding a network printer, and doesn't
affect Power Users in any case. I still don't think that Windows 2000
is any different than Windows XP when if comes to allowing
non-administrators to install drivers, regardless of the load and unload
drivers policy. Hopefully the OP will report back with his findings.

Load and unload device drivers
http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/gp/543.mspx?mfr=true

John

 

[John John (MVP)]

Thanks for the link. I stand corrected.

You're welcome.

John