USB flash drives require Admin rights

[Miha]

Hi

We're having problems with some of USB flash drives that are plugged into
WinXP PRO SP2 (joined into domain).
When a 'user' (non-administrative) plugs the USB drive in, Windows begins
detecting new hardware then displays "You must be a member of the
Administrators group on this computer to install this hardware" and prompts
for an administrative user/password. So I need to come to computer and enter
admin password. It's strange, because not all USB flash drives require
rights. Some of them are installed without any problems (I get a new letter
in explorer), but some of them need to install some kind of USB drivers to
work.
If a user is a local admin there is no problems, but I want to give 'normal
users' rights to do this without admin rights.
Can this be done? Thank you in advance for any informations and help.
Regards,
Miha

 

[Thee Chicago Wolf]

We're having problems with some of USB flash drives that are plugged into

WinXP PRO SP2 (joined into domain).
When a 'user' (non-administrative) plugs the USB drive in, Windows begins
detecting new hardware then displays "You must be a member of the
Administrators group on this computer to install this hardware" and prompts
for an administrative user/password. So I need to come to computer and enter
admin password. It's strange, because not all USB flash drives require
rights. Some of them are installed without any problems (I get a new letter
in explorer), but some of them need to install some kind of USB drivers to
work.
If a user is a local admin there is no problems, but I want to give 'normal
users' rights to do this without admin rights.
Can this be done? Thank you in advance for any informations and help.
Regards,
Miha

Hi,

I recently saw this message when we upgraded from IE6 to IE7. IE7
"broke" the ability for the average Guest user to plug in a USB drive
and it mount without any fuss. Uninstalling IE7 didn't help by the
way. The only thing I could suggest is to se the following in your
Group Policy:

Local Computer Policy > Computer Configuration > Windows Settings >
Security Settings > Local Policies > Security Options > Devices: Allow
to format and eject removable media.

Other than this, not sure what to tell you. People have told me normal
XP behavior is to ask for Admin credentials to allow using a USB drive
as a restricted user. It's never happened in all the years I've
maintained XP at my location. Sorry I couldn't help more.

- Thee Chicago Wolf

 

[Guest]

what brand and model for the usb flash drive the user using? does the usb
flash drive is PNP device without any drivers installation?

 

[Miha]

They are different type of brands. Yes I know that like SanDisk some of them
install additional drive for their U3 data.
But it's strange because some of USB drives are not that kind, they only
install one drive letter and they require admin rights.
Regards,
Miha

 

[Thee Chicago Wolf]

They are different type of brands. Yes I know that like SanDisk some of them

install additional drive for their U3 data.
But it's strange because some of USB drives are not that kind, they only
install one drive letter and they require admin rights.
Regards,
Miha

I would advise a simple group policy to kill the U3 program and keep
it from installing. We've implemented a policy and it works
splendidly. U3 is ONLY required if you've put a password on the USB
drive and it is NOT REQUIRED for normal operation.

- Thee Chicago Wolf

 

[Uwe Sieber]

This is normal for U3 drives. Their fake CDROM drive seems
to require drivers which cannot be installed without admin
rights. The data part should work anyway, so the user can
just cancel the dialog and use the data part.

An U3 drive can be transformed into a normal one by removing
the fake CDROM by means of the U3 removal tool:
http://u3.com/uninstall/

This technique using a fake CDROM to automatically install
additional software is used by some other, non U3 drives,
too. For instance for installing crypto software or
advertising stuff.


Uwe

 

[Miha]

Thank's. Have enable in GPO to allow format and eject USB media to admin and
interactive users.
We'll see what will happen
Regards,Miha