Users prompted for Admin password when USB drive inserted....

[Fonz_Valo]

I hope some can help, I feel like banging my head against the wall with this one lol

 

I have recently created a new ghost image for use in the Music department where I work and whilst the image its self works well there is one problem that is giving me a headache.

 

When ever a non-admin user inserts a usb pen drive they are prompted for the administrator username and password to install it. Now this only happens on this system build and i'm having trouble discovering what could be causing it.....

 

Oh by the way these are normal generic pen drives (no U3 software)

 

Does anyone have any ideas?

 

The systems are running XP Pro SP3 if that helps

[Dom_]

Try this:

 

Rename the Catroot2 folder (Windows XP and Windows Server 2003 only), and then try to install the program again.

 

 

To rename the Catroot2 folder, follow these steps:

 

1. Click Start, click Run, type cmd, and then click OK.

2. At the command prompt, type the following commands, and then press ENTER after each line:

net stop cryptsvc

ren %systemroot%\System32\Catroot2 oldcatroot2

net start cryptsvc

exit

3. Remove all tmp*.cat files from the following folder:

%systemroot%\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}

 

 

If no files that start with tmp exist in this folder, do not remove any other files. The .cat files in this folder are necessary for installing hotfixes and service packs.

 

Important Do not rename the Catroot folder. The Catroot2 folder is automatically recreated by Windows, but the Catroot folder is not recreated if the Catroot folder is renamed.

[Fonz_Valo]

Thank you for the prompt response, I'll give that a try today

[Dom_]

Any joy?

[mattx]

I hope some can help, I feel like banging my head against the wall with this one lol

 

I have recently created a new ghost image for use in the Music department where I work and whilst the image its self works well there is one problem that is giving me a headache.

 

When ever a non-admin user inserts a usb pen drive they are prompted for the administrator username and password to install it. Now this only happens on this system build and i'm having trouble discovering what could be causing it.....

 

Oh by the way these are normal generic pen drives (no U3 software)

 

Does anyone have any ideas?

 

The systems are running XP Pro SP3 if that helps

 

Not sure if this will help but it works on our network - it requires two scripts - one AutoIT and the other a CMD file. I wrote this so a normal user can run it without having to hassle me..... Edit to your requirements.

 

The AutoIT script:

 

; AutoIt Version:  	3.2.8.1
; Language:        	English
; Platform:        	WinXP
; Author:          	Matt 
; Script Function: 	USB Admin Rights Box Fix
; Version:			1 Beta
; Date:				Sept 2008


Opt("TrayIconHide", 1)
SplashTextOn("USB Device Driver Repair by Matt","Remove any USB device from the computer NOW","300","50","-1","-1",2,"","","")
Sleep(5000)
SplashOff()
RunAsSet("administrator", @ComputerName, "YOUR_ADMIN_PASSWORD")
Run(@ComSpec & ' /c net stop cryptsvc', '', @SW_HIDE)
SplashTextOn("USB Device Driver Repair by Matt","Trying to fix problem - this may not work","300","50","-1","-1",2,"","","")
Sleep(5000)
SplashOff()
Run("C:\logs\remove catroot2.cmd")
sleep(3000)
Run(@ComSpec & ' /c net start cryptsvc', '', @SW_HIDE)
RunAsSet()
If FileExists("C:\windows\system32\catroot2") Then
MsgBox(4096, "USB Device Driver Repair", "Ooops, Fix Failed, Re-boot PC and try again")
Else
MsgBox(4096, "USB Device Driver Repair", "Lucky You - Fix may have worked, insert USB Device and cross fingers")
EndIf
Exit

 

The CMD [ which needs to be in a folder called C:\logs for this to work ]

 

rd c:\windows\system32\catroot2 /s /q

 

I had to bodge the .CMD file as for some reason I could not get AutoIT [ in this script ] to remove the directory.

Edited November 9, 2009 by mattx

[cookie_monster]

What is the issue that this script is fixing?

[Fonz_Valo]

The original catroot2 method posted above didn't work

 

I'll give the script a try that MattX has posted as a temporary solution

 

I'll keep you posted

[mattx]

What is the issue that this script is fixing?

 

Well [ this is going back to Sept 2008 and I have re-imaged since then so I am not even sure if this is still being used ] but we had problems of users sticking in USB devices and then the Admin box popping up etc. This was a work around at the time I knocked up to by pass this - like I said I have re-imaged most of our images since then so I am not sure if this is still being used but at the time it worked and everyone smiled, gave me a pat on the back, I got a huge pay rise and we then all sat down and had lashings and lashings of ginger beer.

[MYK-IT]

Similar issue here, but only affects the current image / model.

 

Not exactly pinpointed what is causing it as the image is built the same as all other images/models and Group Policy etc has not changed.

 

What we found is that although the Admin prompt appears, you can just click cancel and the USB Pen Drive still appears and can be accessed.

 

I haven't followed it up recently, but i seem to remember coming to the conclusion that it was the U3 Pen Drives casuing the issue and they add 2 drive letters, 1 being a CD-ROM device possibly meaning a restriction on adding a hardware device???

[Fonz_Valo]

hmmmm........

 

I'm still having no luck with this. I've done a bit of searching on here and found apost where someone stated that a piece of music software could be causing it.

 

The Music software we have in the image is as follows:

 

Cubase V4 (plus elicensor software)

Cubasis

Dance ejay

 

Has anyone experienced any USB issues caused by any of this software?

[MYK-IT]

We've got Cubase (Studio) 4 and an old version of Dance Ejay 2005.

 

We have computers installed with either/both and they work fine.....

 

The image we have the USB issue with just have Dance Ejay 2005 installed, but we have other computer suites with just Dance Ejay 2005 installed, and they work fine (albeit different pc model/image).

[FN-GM]

Did anyone fix this?

 

I thinks its a group policy issue. we have the problem and it doesnt happen on one site but does on the other. The domains are different but images are the same.

[AngryTechnician]

Take a good look at any MSIs you're deploying to each machine on the problem domain. It's not uncommon for repackaged software built with install-capture programs (such as old versions of WinstallLE) to accidentally capture chnages that occur inside the Catroot folder, leading to them overwriting the working Catroot folder when that software is installed to the machine. You could find yourself fixing the problem only to find the MSI auto-heals and breaks it again.

[Nixphoe]

Try adding the user as a power user and see if they still have the issue afterwards. Depending what kind of drivers it is trying to install, some times power users can only do that.

Also try a gpresult and see if you can see any policies that might be applied that could be blocking it.

[ricki]

hmmmm........

 

I'm still having no luck with this. I've done a bit of searching on here and found apost where someone stated that a piece of music software could be causing it.

 

The Music software we have in the image is as follows:

 

Cubase V4 (plus elicensor software)

Cubasis

Dance ejay

 

Has anyone experienced any USB issues caused by any of this software?

 

Yes I am having problems with the usb with cubase. Its got an unsigned driver and will not load without an admin password but I have contacted them and asked them to get it signed but they have not even bothered to reply. The daft thing is if you plug the usb dongle into a different port you have to enter the admin password again. I have ordered some small usb extension cables and made some groved card slots with a gromit. I am going to plug the entension cable in the back of the pc with the wore going inside and fix the usb dongle inside the case so they dont get stolen.

[mattx]

Did anyone fix this?

 

I thinks its a group policy issue. we have the problem and it doesnt happen on one site but does on the other. The domains are different but images are the same.

 

Yep, my script works fine on our PCs.......

[Fonz_Valo]

Sorry to drag this back from the dead.

 

I'm still experiencing this issue and still can't put my finger on cause of the problem. I'm still quite certain though that it is caused by a piece of music software.

 

Mattx, i'm going to save your fix as a last resort as realistically i want to fix this at the root as opposed to working round it

[AIT]

I hope some can help, I feel like banging my head against the wall with this one lol

 

I have recently created a new ghost image for use in the Music department where I work and whilst the image its self works well there is one problem that is giving me a headache.

 

When ever a non-admin user inserts a usb pen drive they are prompted for the administrator username and password to install it. Now this only happens on this system build and i'm having trouble discovering what could be causing it.....

 

Oh by the way these are normal generic pen drives (no U3 software)

 

Does anyone have any ideas?

 

The systems are running XP Pro SP3 if that helps

 

Could i sugest in group policy security settings. enable driver install for non administrators. or selected groups??

[mattx]

Sorry to drag this back from the dead.

 

I'm still experiencing this issue and still can't put my finger on cause of the problem. I'm still quite certain though that it is caused by a piece of music software.

 

Mattx, i'm going to save your fix as a last resort as realistically i want to fix this at the root as opposed to working round it

 

No problem - that's the only reason I did it to start with myself.....

[Fonz_Valo]

Could i sugest in group policy security settings. enable driver install for non administrators. or selected groups??

 

Could you tell me exactly where and what the policy is called? I'm having a quick look and the closest i can find to what your describing is a policy regarding being prompted for permission to install unsigned drivers.

 

Thanks

[AIT]

Could you tell me exactly where and what the policy is called? I'm having a quick look and the closest i can find to what your describing is a policy regarding being prompted for permission to install unsigned drivers.

 

Thanks

 

Well this policy doesnt apply to plug and play drivers. However as your problem isnt behaving normally it might work:

 

under computer configuration, windows settings, security settings, local policies, user rights assignment, "load and unload device drivers"

 

or under administrative templates, system, driver installation, "allow non-administrators to install drivers for these device setup classes"

[Fonz_Valo]

Thanks for that,

 

I've just tried that and its not made any difference unfortunately

 

Thanks anyway

[AIT]

just out of interest do these machines have a different group policy. if so have you tried dropping one into another ou or vica versa. to identify if its software or group policy etc

[timzim]

i'm going to save your fix as a last resort as realistically i want to fix this at the root as opposed to working round it

 

Ooh, Problem Management before Incident Management - someone's not using ITIL...

[gaz350]

i think timzim has just been on a course