james14100 Posted October 15, 2010 Posted October 15, 2010 Hi, As subject says really, I have ordered in a load of memory pens which i need to apply administrator rights for all logins to so that the built in encryption software can work. Is there a way around this? Cheers James
Butuz Posted October 15, 2010 Posted October 15, 2010 You could add a file hash rule in your software restrictions settings for the EXE that the mem stick encryption uses. As long as the version of the EXE on all memory sticks is the same this should work. As long as the exe does not actually install anything on the PC you shouldn't need any privileged access rights for staff. Butuz
james14100 Posted October 15, 2010 Author Posted October 15, 2010 Its only restricted through GPO but can't see where?! It doesn't install anything but for some reason the software embedded into the pens needs admin rights
mac_shinobi Posted October 15, 2010 Posted October 15, 2010 what encryption software we talking about here ?? Free OFTE - and you can download from the same site as per below FreeOTFE
james14100 Posted October 15, 2010 Author Posted October 15, 2010 It's the Lexar JumpDrive Secure 2 encryption software. I don't want to install any software I want it to work natively on the pen so it work anywhere
Arthur Posted October 16, 2010 Posted October 16, 2010 As long as the exe does not actually install anything on the PC you shouldn't need any privileged access rights for staff. Unfortunately the Lexar Secure II encryption software requires admin rights to install a driver (like TrueCrypt does). The driver is located in the "Data" folder on the flash drive. The FAQ also mentions this... Q: Can I run Secure II without admin privileges? A: You can run Secure II on a non-admin account. However, the Encrypted Vault feature requires admin privileges. 1
SYNACK Posted October 16, 2010 Posted October 16, 2010 Not 100% if this will work but could be worth a go SeanDaniel.com - Home, Small Business Server and Related Technology: How to launch a program always elevated under Vista UAC should work the same even if you are still using XP. 1
james14100 Posted October 26, 2010 Author Posted October 26, 2010 Unfortunately the Lexar Secure II encryption software requires admin rights to install a driver (like TrueCrypt does). The driver is located in the "Data" folder on the flash drive. The FAQ also mentions this... Surely if I install that driver across the network then elsewhere it 'should' be fine?
Arthur Posted October 26, 2010 Posted October 26, 2010 Surely if I install that driver across the network then elsewhere it 'should' be fine? I don't see why not, although Lexar do not appear to provide an easy way to install the driver (LxrSII1d.sys) yourself.
james14100 Posted October 26, 2010 Author Posted October 26, 2010 I've just tried this by creating an MSI to no avail. However the frustrating this is that any machine that I login via admin use it then try using a staff login it works. There must be a way around this :-/
Azhibberd Posted October 26, 2010 Posted October 26, 2010 How about using an msi capture program? So catch it before and after installing the software... then you can see the changes that need to be deployed out?
Arthur Posted October 26, 2010 Posted October 26, 2010 If it's anything like TrueCrypt, the Secure II driver and service will located somewhere under the following two registry keys. If you search for "LxrSII" I'm sure you will find the relevant bits. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root I don't have a Secure II flash drive myself so am unable to check, but it looks like it just needs the following four files to work (along with the registry settings above). %SystemRoot%\System32\Drivers\LxrSII1d.sys %SystemRoot%\System32\LxrSII1s.exe %SystemRoot%\System32\LxrSII1.dll %SystemRoot%\System32\LxrUnplug.exe 1
speckytecky Posted February 1, 2011 Posted February 1, 2011 Anyone tried this? If it's anything like TrueCrypt, the Secure II driver and service will located somewhere under the following two registry keys. If you search for "LxrSII" I'm sure you will find the relevant bits. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root I don't have a Secure II flash drive myself so am unable to check, but it looks like it just needs the following four files to work (along with the registry settings above). %SystemRoot%\System32\Drivers\LxrSII1d.sys %SystemRoot%\System32\LxrSII1s.exe %SystemRoot%\System32\LxrSII1.dll %SystemRoot%\System32\LxrUnplug.exe
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now