Power Users and USB Devices

G

Guest

I need to be able to the Power User group full control over all USB devices.
Currently they are unable to install their own USB devices. How do I do that?
 
S

Steven L Umbach

The link below is about USB printers but the concept is the same in that if
the user is not a local administrator then it will only work if server side
installation is done which requires that the USB/drivers meet certain
requirements including that the drivers must be signed. Some do and some
don't so in your case you will need to find a manufacturer that meets your
needs with server-side installations.. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;326473

CAUSE
For security reasons, Windows XP cannot permit a user who is not an
administrator to install a device on the computer. When you log on using
nonadministrator credentials, the "Load and unload device drivers" user
right only allows you to make nonpersistent changes to the state of the
drivers that are running on the computer. A nonpersistent change is a change
that goes away when you restart the computer (for example, a command such as
net start or net stop).

Server-side Installations
A server-side installation is a device installation that is performed
entirely by the Plug and Play manager. A server-side installation can occur
only if the following conditions are true: . A bus driver detects the device
and notifies Plug and Play Manager.
. Plug and Play Manager finds an .inf file that contains a hardware ID
that matches the hardware ID of the device.
. The .inf file and the drivers for the device are signed.
. Windows XP can locate all the drivers for the device without
prompting the user for media locations (for example, the drivers are
included with the operating system, a vendor-supplied driver was previously
installed, or vendor-supplied driver files are preinstalled).
. The class installer and co-installers for the device do not open
properties at the end of the installation.
. The .inf file for the device does not indicate that the device
requires an interactive installation.
. RunOnce registry entries consist only of calls to the Rundll32.exe
file.
A server-side installation does not prompt the user for any additional
information and does not require administrator credentials. This type of
installation is known as "server-side" because the installation is performed
by Plug and Play Manager and interaction with a user-mode client is not
required.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top