+ Post New Thread
Page 2 of 4 FirstFirst 1234 LastLast
Results 16 to 30 of 47
Windows Thread, USB devices for non-admins in Technical; Well looking at what the program does it seems to grant users acccess to the INF files, the one i ...
  1. #16
    fooby's Avatar
    Join Date
    Dec 2005
    Posts
    351
    Thank Post
    0
    Thanked 5 Times in 4 Posts
    Rep Power
    19

    Re: USB devices for non-admins

    Well looking at what the program does it seems to grant users acccess to the INF files, the one i think it does here is USBSTOR.INF maybe this is all thats needed to be changed, and maybe there is a "USBIMG.INF" (i made that name up it isnt a real INF) maybe there are more .INF files that need full access granted to them.

    If you read the autoit script in notepad you can sort of see what is happening.

    HTH

  2. #17
    eejit's Avatar
    Join Date
    Jun 2005
    Location
    Ireland
    Posts
    606
    Thank Post
    52
    Thanked 12 Times in 12 Posts
    Rep Power
    23

    Re: USB devices for non-admins

    Cheers fooby, that file didn't work, but like you, I checked what it did. I actually added "Everyone" - "Full Control" to the windows\inf folder as a test, but that didn't work

  3. #18
    fooby's Avatar
    Join Date
    Dec 2005
    Posts
    351
    Thank Post
    0
    Thanked 5 Times in 4 Posts
    Rep Power
    19

    Re: USB devices for non-admins

    shame

  4. #19
    eejit's Avatar
    Join Date
    Jun 2005
    Location
    Ireland
    Posts
    606
    Thank Post
    52
    Thanked 12 Times in 12 Posts
    Rep Power
    23

    Re: USB devices for non-admins

    Breakthrough! :idea:

    If you put the drivers on a network share and alter the registry devicepath to point to that network share. Then, as long as the drivers are Windows Hardware Quality Labs (WHQL) supported the device will be found and added even for a pupil.

    This is known as a server side install which is the only way to allow non-admins to add a device in XP. Thanks for the guys at Microsoft for helping me with this.

  5. #20
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    4,993
    Thank Post
    120
    Thanked 286 Times in 263 Posts
    Rep Power
    108

    Re: USB devices for non-admins

    Worthy of a wiki entry or just a quick how to here id say

  6. #21
    ICTNUT's Avatar
    Join Date
    Jul 2005
    Location
    Hereford
    Posts
    1,419
    Thank Post
    196
    Thanked 249 Times in 122 Posts
    Rep Power
    62

    Re: USB devices for non-admins

    @eejit :

    Any chance of a "How To" mate, I am suffering with the same problem here and it's driving me nuts !!!!!

  7. #22

    Join Date
    Jul 2005
    Location
    Wolverhampton
    Posts
    100
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: USB devices for non-admins

    yes please, I need that info too, thanks :-)

  8. #23
    eejit's Avatar
    Join Date
    Jun 2005
    Location
    Ireland
    Posts
    606
    Thank Post
    52
    Thanked 12 Times in 12 Posts
    Rep Power
    23

    Re: USB devices for non-admins

    Sure, it only works for Windows Hardware Quality Labs (WHQL) drivers though. That means real WHQL passed drivers - putting them in a folder labeled "WHQL" does not work as done by Logitech with their Quickcam Express drivers

    Anyway, it's known as a server-side install:
    • Make a hidden folder share on the server (\\server\drivers$)
    • Extract your drivers to that folder so that the *.inf is in the root
    • Open regedit on the client and browse to:

    Code:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion
    • In the DevicePath key append the server share after a semicolon
      Example:
      Before %SystemRoot%\inf
      After %SystemRoot%\inf;\\server\drivers$


    That should do it. BTW, I give full share and security permissions to Everyone on the driver share folder. No one knows it exists, and that way I know that the files will definitely be accessible by all.

  9. #24
    eean's Avatar
    Join Date
    May 2006
    Location
    Kuala Lumpur
    Posts
    570
    Thank Post
    70
    Thanked 56 Times in 40 Posts
    Rep Power
    31

    Re: USB devices for non-admins

    Hmm... would doubt it. If you open the uncompiled Autoit script in notepad- AllowUSBJumpDrives.au3 - you can see it works by giving users ' Modify, Read and Execute, Read, Write' on C:\Windows\inf\usbstor.inf. So I assume it must be a permissions problem. Perhaps you could try changing the permissions on the specific .inf files or on c:\windows\inf\ - or would that be a bit of a security risk?

    Let us know how you get on - I've a simlar problem with digital cameras & mice etc... Seems to ask for a admin password randomly about 10% of the time.

    I guess you already know about autoit, if you don't its great and free! http://www.autoitscript.com/

  10. #25
    eejit's Avatar
    Join Date
    Jun 2005
    Location
    Ireland
    Posts
    606
    Thank Post
    52
    Thanked 12 Times in 12 Posts
    Rep Power
    23

    Re: USB devices for non-admins

    eean - who was your post in reply to?

  11. #26
    tarquel's Avatar
    Join Date
    Jun 2005
    Location
    Powys, Mid-Wales, UK
    Posts
    1,740
    Thank Post
    13
    Thanked 45 Times in 35 Posts
    Rep Power
    29

    Re: USB devices for non-admins

    I think he was replying to you eejit lol

    That should do it. BTW, I give full share and security permissions to Everyone on the driver share folder. No one knows it exists, and that way I know that the files will definitely be accessible by all.
    What you could do is prevent directory listing - so that they can read/write but can't view the contents i.e. so even if they did manage to find the directory, they wouldnt be able to browse it

    Regards
    Nath

  12. #27
    eejit's Avatar
    Join Date
    Jun 2005
    Location
    Ireland
    Posts
    606
    Thank Post
    52
    Thanked 12 Times in 12 Posts
    Rep Power
    23

    Re: USB devices for non-admins

    Right, I must admit that I always give full control to everyone for that kind of thing and deploying apps in AD. I'm never happy with the results of "sensible" permissions - i.e. read only - it just doesn't seem to work properly in my experience

  13. #28
    eean's Avatar
    Join Date
    May 2006
    Location
    Kuala Lumpur
    Posts
    570
    Thank Post
    70
    Thanked 56 Times in 40 Posts
    Rep Power
    31

    Re: USB devices for non-admins

    Quote Originally Posted by eejit
    eean - who was your post in reply to?
    Sorry! It was a reply to
    "Cheers for the link [novel thing], but it says "Grant Users and Power Users the ability to install USB mass storage devices." will that really allow users to add devices too?
    Will test it shortly."

    But I missed the second page, so I'm a bit behind. I've always been a bit special needs.

  14. #29

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,820
    Thank Post
    110
    Thanked 590 Times in 511 Posts
    Blog Entries
    1
    Rep Power
    226

    Re: USB devices for non-admins

    Use Quote tags ffs.

  15. #30

    bossman's Avatar
    Join Date
    Nov 2005
    Location
    England
    Posts
    3,967
    Thank Post
    1,212
    Thanked 1,075 Times in 766 Posts
    Rep Power
    332

    Re: USB devices for non-admins

    These are the files i use to allow all users write access on my CC3 RM network and it works a treat, these are adapted from messenger but should suffice. You should be able to adapt them to suite your system and use a gpo to push it out to the clients. Hope this works for you

SHARE:
+ Post New Thread
Page 2 of 4 FirstFirst 1234 LastLast

Similar Threads

  1. Replies: 16
    Last Post: 3rd December 2007, 08:08 PM
  2. Know your UNIX admins
    By ITWombat in forum Jokes/Interweb Things
    Replies: 0
    Last Post: 9th April 2007, 04:36 PM
  3. Local admins and Mandatory Profiles
    By Bobo in forum Windows
    Replies: 21
    Last Post: 2nd April 2007, 03:02 PM
  4. Replies: 6
    Last Post: 22nd February 2007, 07:36 PM
  5. admins and domain admins
    By browolf in forum Windows
    Replies: 25
    Last Post: 1st November 2006, 03:29 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •