USB Devices in Windows 2000 Proffessional

[Guest]

Is it possible to allow users who are not administrators to install USB
Devices such as pen drives and usb mice? My users are currently power users
and do not have permission to perform such functions I would like to allow
them to be able to do this.

 

[Steven L Umbach]

You might try giving power users the user right to load and unload device
drivers in local or domain/OU security policy. By default only
administrators have that user right. The links below give more details. ---
Steve

http://www.microsoft.com/resources/...dowsServ/2003/standard/proddocs/en-us/543.asp

http://tinyurl.com/5hv7e -- same link, just shorter.

 

[Guest]

I should have mentioned in my first post that I had that policy in place
already.
Any other Suggestions?

 

[Marco]

Greg,

it cannot be done. Some devices have what is know as a client-setup which
basically is a setup with a UI and requires administrative privileges. Only
server-side setup for signed drivers (preloaded) can be run when a user does
not have admin privs.

In other words, it really depends on the device that your users wiant to
install: if the device has a signed driver pre-installed and is a
server-side setup then it will work, otherwise admin privs are required as
they need to run the setup.

One possible alternative, not free, is to use NeoExec ( www.neovalens.com)
and authorize each setup.

cheers

Marco


----