Mad1
Non spill cup.
Good Guy/Gal Points. 25
 Offline
Posts: 422
|
 |
« on: April 09, 2008, 10:26:46 AM » |
|
Theres a pc at work that wont allow usb pen drives to be accessed on a limited account, it asks for admin password. Anyone know where the option is to allow them to use usb? Some computers are OK it's just one or two others. I've tried allowing interactive users to use removable media but that didn't work. OS is XP Pro Cheers guys.  |
|
|
|
|
Logged
|
|
|
|
|
Stevie
Master Of Suppers.
Lager shandy
Good Guy/Gal Points. 50
Offline
Posts: 1111
|
|
« Reply #1 on: April 09, 2008, 01:01:33 PM » |
|
Have you looked at the Group Policy Objects? might be something in there
|
|
|
|
|
Logged
|
|
|
|
|
Mad1
Non spill cup.
Good Guy/Gal Points. 25
Offline
Posts: 422
|
|
« Reply #2 on: April 09, 2008, 02:40:20 PM » |
|
Could do although it's not on a domain. My boss wont fork out for a server.  |
|
|
|
|
Logged
|
|
|
|
|
Wooster
Wall Eyed Wanker
Administrator
Alcoholic
Good Guy/Gal Points. -518
Offline
Posts: 5518
'An how faust kin it ging?'
|
|
« Reply #3 on: April 09, 2008, 02:55:08 PM » |
|
Control Panel > Administrative Tools > Local Security Policy > Local Policies > User Rights Assignment > Load and Unload Device Drivers and add the user to this group.  |
|
|
|
|
Logged
|
|
|
|
|
Mad1
Non spill cup.
Good Guy/Gal Points. 25
Offline
Posts: 422
|
|
« Reply #4 on: April 09, 2008, 03:07:27 PM » |
|
Cheers Woosty.  I looked there before giving up don't know how I missed it. |
|
|
|
|
Logged
|
|
|
|
|
Stevie
Master Of Suppers.
Lager shandy
Good Guy/Gal Points. 50
Offline
Posts: 1111
|
|
« Reply #5 on: April 09, 2008, 03:31:11 PM » |
|
Could do although it's not on a domain. My boss wont fork out for a server. you don't need a domain controller to change GPO's. Start - Run - Gpedit.msc Bunch of stuff in there for locking / unlocking features of windows. looks like woosty nailed it though. |
|
|
|
|
Logged
|
|
|
|
|
Wooster
Wall Eyed Wanker
Administrator
Alcoholic
Good Guy/Gal Points. -518
Offline
Posts: 5518
'An how faust kin it ging?'
|
|
« Reply #6 on: April 09, 2008, 03:47:07 PM » |
|
Cheers Google you mean..  I had a good idea this was the place to set the permissions, but I didn't know which one allowed the USB to be used.  |
|
|
|
|
Logged
|
|
|
|
|
Mad1
Non spill cup.
Good Guy/Gal Points. 25
Offline
Posts: 422
|
|
« Reply #7 on: April 09, 2008, 09:54:58 PM » |
|
Could do although it's not on a domain. My boss wont fork out for a server. you don't need a domain controller to change GPO's. Start - Run - Gpedit.msc Bunch of stuff in there for locking / unlocking features of windows. looks like woosty nailed it though. I'll be fooked if im going to manually set permissions on 40 odd computers. :lol: |
|
|
|
|
Logged
|
|
|
|
|
Wooster
Wall Eyed Wanker
Administrator
Alcoholic
Good Guy/Gal Points. -518
Offline
Posts: 5518
'An how faust kin it ging?'
|
|
« Reply #8 on: April 09, 2008, 10:00:58 PM » |
|
Don't you just need one PC to set up a local domain?
(It's been a while since I did this tbh (we were using Windows server 2003 at the time))
|
|
|
|
« Last Edit: April 09, 2008, 10:02:55 PM by Wooster »
|
Logged
|
|
|
|
|
Mad1
Non spill cup.
Good Guy/Gal Points. 25
Offline
Posts: 422
|
|
« Reply #9 on: April 09, 2008, 10:16:22 PM » |
|
Technically yes. Practically no. There's also the issue of licensing. There is funding in September for a server. I'm gonna make damn sure I get the leetest rig possible. |
|
|
|
|
Logged
|
|
|
|
|
Mad1
Non spill cup.
Good Guy/Gal Points. 25
Offline
Posts: 422
|
|
« Reply #10 on: April 12, 2008, 12:30:19 AM » |
|
OK so that didn't solve it. :|
|
|
|
|
|
Logged
|
|
|
|
|
Wooster
Wall Eyed Wanker
Administrator
Alcoholic
Good Guy/Gal Points. -518
Offline
Posts: 5518
'An how faust kin it ging?'
|
|
« Reply #11 on: April 12, 2008, 09:25:37 AM » |
|
Have a look in the same area, Local Security Policy>Security Options Loading and Unloading device drivers might still be regarded as an elevation to Admin Privileges so [User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode] might need to be changed to Prompt for Credentials instead of Prompt for Consent.  |
|
|
|
|
Logged
|
|
|
|
|
Stevie
Master Of Suppers.
Lager shandy
Good Guy/Gal Points. 50
Offline
Posts: 1111
|
|
« Reply #12 on: April 12, 2008, 09:48:47 AM » |
|
If it's working on most and not on some, then something has been changed, you could spend all your time looking for it or you could just blow the pc away, if i hit a snag on a pc that looks obscure and takes up more than an hour of my time i just re-image the pc.
|
|
|
|
|
Logged
|
|
|
|
|
Wooster
Wall Eyed Wanker
Administrator
Alcoholic
Good Guy/Gal Points. -518
Offline
Posts: 5518
'An how faust kin it ging?'
|
|
« Reply #13 on: April 12, 2008, 10:20:07 AM » |
|
I think the Admin Privileges to install a USB drive was implemented when people started to realise it could be a huge security risk. Maybe some PC's have different security settings than others.. There's an executable on this page http://www.raymond.cc/blog/archives/2007/11/29/windows-requires-administrator-rights-to-install-usb-flash-drives/ which modifys the usbstor.inf file, which might work. |
|
|
|
« Last Edit: April 12, 2008, 10:22:07 AM by Wooster »
|
Logged
|
|
|
|
|
Mad1
Non spill cup.
Good Guy/Gal Points. 25
Offline
Posts: 422
|
|
« Reply #14 on: April 12, 2008, 07:47:22 PM » |
|
I'll have a try on Monday.
Cheers for the help guys.
|
|
|
|
|
Logged
|
|
|
|
|
|
