I love well written USB drivers (Smart Board etc) which don't require administrative login each time you want to move the item.
However I have more than one device around my network that even though the device driver is installed they 'find new hardware' and then require me to log in as the local admin.
Sometimes this is even happening when the USB device is plugged intop a USB socket that it has not seen before.
In order to save my sanity I don't want to have to walk around plugging in every device into every USB socket.
Is there a way to create an account that staff can use to agree to this hardware being detected without allowing said account to log in?
In short, no.
What you can do is give ordinary users permissions to write to the necessary registry keys - from memory, these are HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\U SB and HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\U SBSTOR