+ Post New Thread
Page 3 of 4 FirstFirst 1234 LastLast
Results 31 to 45 of 47
Windows Thread, USB devices for non-admins in Technical; We add all users to the local admin group on all PC's, this lets users install all the USB devices ...
  1. #31

    Join Date
    May 2006
    Location
    Milton Keynes
    Posts
    54
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: USB devices for non-admins

    We add all users to the local admin group on all PC's, this lets users install all the USB devices they wish.

    Then we let ranger do the locking down, dont have any problems with it this way.

  2. #32

    Ric_'s Avatar
    Join Date
    Jun 2005
    Location
    London
    Posts
    7,590
    Thank Post
    109
    Thanked 762 Times in 593 Posts
    Rep Power
    180

    Re: USB devices for non-admins

    @W32/Jbot: That doesn't sound like a sensible idea... this will allow those nasty IE-related toolbars and other crap to install itself. I know r
    Ranger is quite good at locking down the machines but it isn't brilliant and won't stop some of these clever little things.

  3. #33
    eejit's Avatar
    Join Date
    Jun 2005
    Location
    Ireland
    Posts
    606
    Thank Post
    52
    Thanked 12 Times in 12 Posts
    Rep Power
    22

    Re: USB devices for non-admins

    @ W32/Jbot. Wow, that is the most remarkable post of the year so far. 8O

  4. #34

    Join Date
    May 2006
    Location
    Milton Keynes
    Posts
    54
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: USB devices for non-admins

    It all depends how much time you want to spend setting ranger up, they cant install any toolbars as they are all title check blocked.

    I assume this is remarkable because i stated it works? Eejit please explain?

    Besides which a desktop to be rangered is suposed to be configured in this way.

    I have just taken this statement from the Rangersuite KB before you lot decide i should be hanged

    "Please note that by adding the network domain users into the local power user or administrator group the inherent Windows security is being reduced or removed which is not recommended in environments without Ranger however because Ranger provided workstation security based on the users network group membership you can still enforce security over the user and prevent them exploiting this privilege and corrupting or changing the machine."

  5. #35
    eejit's Avatar
    Join Date
    Jun 2005
    Location
    Ireland
    Posts
    606
    Thank Post
    52
    Thanked 12 Times in 12 Posts
    Rep Power
    22

    Re: USB devices for non-admins

    No, not remarkable because it works, but it seems to me a crazy thing to do. It just makes a load of extra work for you because of all the new locking down that you'll need to do.

  6. #36

    Join Date
    May 2006
    Location
    Milton Keynes
    Posts
    54
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: USB devices for non-admins

    in actual fact it makes for less work, things like the odd system file that poorly designed eduapps need access to dont get locked and cause us problems. USB devices work etc. i do hold my hands up and admit to actually questioning my NM about this in the first place, but if it works i can't argue with it can i?

  7. #37

    Join Date
    Apr 2006
    Location
    Isle Of Dogs
    Posts
    30
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: USB devices for non-admins

    I am having problems with USB drives, when i log on as a teacher on some PC the USB drive works no prob, but on others it asks for the admin password.

    We have a few different types of PC & we cant think what we have done different on the Image to make it not work.

    The latest example is when we got 28 New PC & made 2 different Images (Admin & Class Room) which were started from fress 1 by me & 1 by another Technician, mine works ok for some reason but the other wants a PW every time, The head Technician thinks it could be due to a doggy slipstreamed automatic XP Installation CD?

    I know we have the Driver signing to Ignore, we have allowed everyone to load & unload Device Drivers in group policy.

    Could anyone help. (& sorry if i should have put this as a new Topic)
    Thanks

  8. #38
    eejit's Avatar
    Join Date
    Jun 2005
    Location
    Ireland
    Posts
    606
    Thank Post
    52
    Thanked 12 Times in 12 Posts
    Rep Power
    22

    Re: USB devices for non-admins

    Are all the USB drives the same make and model?

  9. #39

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,802
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: USB devices for non-admins

    Bit late but there's a script you can download from Novell's Cool Solutions site to fix the USB devices for non-admins.

    http://www.novell.com/coolsolutions/tools/16306.html

  10. #40

    SpuffMonkey's Avatar
    Join Date
    Jul 2005
    Posts
    2,224
    Thank Post
    54
    Thanked 276 Times in 184 Posts
    Rep Power
    133

    Re: USB devices for non-admins

    Quote Originally Posted by Geoff
    Bit late but there's a script you can download from Novell's Cool Solutions site to fix the USB devices for non-admins.

    http://www.novell.com/coolsolutions/tools/16306.html
    Alas it doesn't fix the problem though Geoff. MS Certified drivers are fine and work no problems - but uncertified drivers can only be installed by administrators. Alas we find that kids sticking in devices that require uncertified drivers and trying to click through the permissions screen leaves the usb port in a sort of hung state where it becomes admin only for all drivers until you log in as admin and free it up again. IT staff and teaching staff are pretty exasperated with this - but days of googling have failed to produce a working solution

  11. #41
    eejit's Avatar
    Join Date
    Jun 2005
    Location
    Ireland
    Posts
    606
    Thank Post
    52
    Thanked 12 Times in 12 Posts
    Rep Power
    22

    Re: USB devices for non-admins

    Ok SpuffMonkey, I can confirm that what you need to do is impossible according to Microsoft (BTW, not sure if you know that if you sign up to the Microsoft Partner program you can get some great free support as a registered member)
    Have a read of my previous posts, but basically only signed drivers can be installed by non-admins via a network share.

  12. #42
    eean's Avatar
    Join Date
    May 2006
    Location
    Kuala Lumpur
    Posts
    559
    Thank Post
    65
    Thanked 52 Times in 37 Posts
    Rep Power
    29

    Re: USB devices for non-admins

    Is this problem happening to you guys consistently? I have a similar problem but it it happening randomly, so I'm trying to figure out if it is related or if I have a whole new exciting problem of my own(!)

    15 identical laptops (same XP image etc...), logged on as same non-admin user. Plug in 11 identical digital cameras, most will insall fine (using built in usb storage device driver - so therefore signed) but usually one always asks for a username and password. Happens with a different laptop and different camera each time. Also happens on desktops (including different brands of motherboards)
    Also got gyration mice/keyboard: Installed itself no problems for 1 year (using native XP drivers), now asks for admin password (on 1 out of 4 PCs).
    Also happened once (as far as I'm aware) on one pen drive. Teachers all have same brand of pen-drive and they've all worked fine for a year.

    The Pen drives and mice aren't a problem but the digital cameras are intended to be used as a class set... so it can be irritating if one group can't download their pictures.
    Any ideas?

  13. #43

    Join Date
    Jul 2007
    Location
    Edinburgh
    Posts
    6
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: USB devices for non-admins

    I'm also having a similar problem and hours on google is no help at all.

    It's rather confusing as it works as intended on some machines but refuses on others. They're all set up exactly the same using the same RIS build and have the same software and policies.

    I've went to the extent of upping the permissions of my test user account to have full filesystem and registry access which makes no difference. I've also checked that we have all of the correct settings in the GPO's we apply to the machines.

    Has anyone figured this out yet?

  14. #44
    User3204's Avatar
    Join Date
    Aug 2006
    Location
    Wirral
    Posts
    769
    Thank Post
    55
    Thanked 66 Times in 62 Posts
    Rep Power
    34

    Re: USB devices for non-admins

    No.

    I still get the issue, and it looks like one of the images (out of two), that I am building for new machines this year, is having the problem, but the other isn't.


    It is just the "unsigned" drivers that complains, all the rest seem to work for me.

    I am tempted to go and buy all new students (and staff) a USB disk each... after making sure they are ones that will work first.


    One of my suppliers is trying to see if she can get them sequentially numbered (or uniquely labelled), so that we can identify "lost" ones.

  15. #45
    eean's Avatar
    Join Date
    May 2006
    Location
    Kuala Lumpur
    Posts
    559
    Thank Post
    65
    Thanked 52 Times in 37 Posts
    Rep Power
    29

    Re: USB devices for non-admins

    Anybody shed any more light on this problem? It seems to be happening more and more frequently now... (perhaps it's just that more staff have lost their original school usb drive so have bought their own replacement. )

    It only happens on certain machines and happens with USB pen drives, even though they should be using the Microsoft signed driver. When you do type in an admin password, it warns that the driver is not signed (surely it must be!).
    Sometimes, once the admin password has been typed in, the machine is ok for a while, but with others, once they've taken this funny turn, will insist on the admin password every time the device is inserted!

    Argh!

SHARE:
+ Post New Thread
Page 3 of 4 FirstFirst 1234 LastLast

Similar Threads

  1. Replies: 16
    Last Post: 3rd December 2007, 08:08 PM
  2. Know your UNIX admins
    By ITWombat in forum Jokes/Interweb Things
    Replies: 0
    Last Post: 9th April 2007, 04:36 PM
  3. Local admins and Mandatory Profiles
    By Bobo in forum Windows
    Replies: 21
    Last Post: 2nd April 2007, 03:02 PM
  4. Replies: 6
    Last Post: 22nd February 2007, 07:36 PM
  5. admins and domain admins
    By browolf in forum Windows
    Replies: 25
    Last Post: 1st November 2006, 03:29 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •