USB flash drives require Admin rights

Miha

Hi

We're having problems with some of USB flash drives that are plugged into
WinXP PRO SP2 (joined into domain).
When a 'user' (non-administrative) plugs the USB drive in, Windows begins
detecting new hardware then displays "You must be a member of the
Administrators group on this computer to install this hardware" and prompts
for an administrative user/password. So I need to come to computer and enter
admin password. It's strange, because not all USB flash drives require
rights. Some of them are installed without any problems (I get a new letter
in explorer), but some of them need to install some kind of USB drivers to
work.
If a user is a local admin there is no problems, but I want to give 'normal
users' rights to do this without admin rights.
Can this be done? Thank you in advance for any informations and help.
Regards,
Miha

Thee Chicago Wolf

>We're having problems with some of USB flash drives that are plugged into
>WinXP PRO SP2 (joined into domain).
>When a 'user' (non-administrative) plugs the USB drive in, Windows begins
>detecting new hardware then displays "You must be a member of the
>Administrators group on this computer to install this hardware" and prompts
>for an administrative user/password. So I need to come to computer and enter
>admin password. It's strange, because not all USB flash drives require
>rights. Some of them are installed without any problems (I get a new letter
>in explorer), but some of them need to install some kind of USB drivers to
>work.
>If a user is a local admin there is no problems, but I want to give 'normal
>users' rights to do this without admin rights.
>Can this be done? Thank you in advance for any informations and help.
>Regards,
>Miha

Hi,

I recently saw this message when we upgraded from IE6 to IE7. IE7
"broke" the ability for the average Guest user to plug in a USB drive
and it mount without any fuss. Uninstalling IE7 didn't help by the
way. The only thing I could suggest is to se the following in your
Group Policy:

Local Computer Policy > Computer Configuration > Windows Settings >
Security Settings > Local Policies > Security Options > Devices: Allow
to format and eject removable media.

Other than this, not sure what to tell you. People have told me normal
XP behavior is to ask for Admin credentials to allow using a USB drive
as a restricted user. It's never happened in all the years I've
maintained XP at my location. Sorry I couldn't help more.

- Thee Chicago Wolf

Asuran

what brand and model for the usb flash drive the user using? does the usb
flash drive is PNP device without any drivers installation?

"Miha" wrote:

> Hi
>
> We're having problems with some of USB flash drives that are plugged into
> WinXP PRO SP2 (joined into domain).
> When a 'user' (non-administrative) plugs the USB drive in, Windows begins
> detecting new hardware then displays "You must be a member of the
> Administrators group on this computer to install this hardware" and prompts
> for an administrative user/password. So I need to come to computer and enter
> admin password. It's strange, because not all USB flash drives require
> rights. Some of them are installed without any problems (I get a new letter
> in explorer), but some of them need to install some kind of USB drivers to
> work.
> If a user is a local admin there is no problems, but I want to give 'normal
> users' rights to do this without admin rights.
> Can this be done? Thank you in advance for any informations and help.
> Regards,
> Miha
>
>

Miha

They are different type of brands. Yes I know that like SanDisk some of them
install additional drive for their U3 data.
But it's strange because some of USB drives are not that kind, they only
install one drive letter and they require admin rights.
Regards,
Miha

"Asuran" <stevenchan455@hotmail.com> wrote in message
news:6DA4759A-9383-4DDD-9140-B65F9E05FD58@microsoft.com...
> what brand and model for the usb flash drive the user using? does the usb
> flash drive is PNP device without any drivers installation?
>
> "Miha" wrote:
>
>> Hi
>>
>> We're having problems with some of USB flash drives that are plugged into
>> WinXP PRO SP2 (joined into domain).
>> When a 'user' (non-administrative) plugs the USB drive in, Windows begins
>> detecting new hardware then displays "You must be a member of the
>> Administrators group on this computer to install this hardware" and
>> prompts
>> for an administrative user/password. So I need to come to computer and
>> enter
>> admin password. It's strange, because not all USB flash drives require
>> rights. Some of them are installed without any problems (I get a new
>> letter
>> in explorer), but some of them need to install some kind of USB drivers
>> to
>> work.
>> If a user is a local admin there is no problems, but I want to give
>> 'normal
>> users' rights to do this without admin rights.
>> Can this be done? Thank you in advance for any informations and help.
>> Regards,
>> Miha
>>
>>

Thee Chicago Wolf

>They are different type of brands. Yes I know that like SanDisk some of them
>install additional drive for their U3 data.
>But it's strange because some of USB drives are not that kind, they only
>install one drive letter and they require admin rights.
>Regards,
>Miha

I would advise a simple group policy to kill the U3 program and keep
it from installing. We've implemented a policy and it works
splendidly. U3 is ONLY required if you've put a password on the USB
drive and it is NOT REQUIRED for normal operation.

- Thee Chicago Wolf

Uwe Sieber

This is normal for U3 drives. Their fake CDROM drive seems
to require drivers which cannot be installed without admin
rights. The data part should work anyway, so the user can
just cancel the dialog and use the data part.

An U3 drive can be transformed into a normal one by removing
the fake CDROM by means of the U3 removal tool:
http://u3.com/uninstall/

This technique using a fake CDROM to automatically install
additional software is used by some other, non U3 drives,
too. For instance for installing crypto software or
advertising stuff.


Uwe




Miha wrote:
> Hi
>
> We're having problems with some of USB flash drives that are plugged
> into WinXP PRO SP2 (joined into domain).
> When a 'user' (non-administrative) plugs the USB drive in, Windows
> begins detecting new hardware then displays "You must be a member of the
> Administrators group on this computer to install this hardware" and
> prompts for an administrative user/password. So I need to come to
> computer and enter admin password. It's strange, because not all USB
> flash drives require rights. Some of them are installed without any
> problems (I get a new letter in explorer), but some of them need to
> install some kind of USB drivers to work.
> If a user is a local admin there is no problems, but I want to give
> 'normal users' rights to do this without admin rights.
> Can this be done? Thank you in advance for any informations and help.
> Regards,
> Miha
>
>

Miha

Thank's. Have enable in GPO to allow format and eject USB media to admin and
interactive users.
We'll see what will happen :-)
Regards,Miha

"Thee Chicago Wolf" <.@.> wrote in message
news:ji71j3lu6q5mhrc57i3n51na45rn29ntuq@4ax.com...
> >We're having problems with some of USB flash drives that are plugged into
>>WinXP PRO SP2 (joined into domain).
>>When a 'user' (non-administrative) plugs the USB drive in, Windows begins
>>detecting new hardware then displays "You must be a member of the
>>Administrators group on this computer to install this hardware" and
>>prompts
>>for an administrative user/password. So I need to come to computer and
>>enter
>>admin password. It's strange, because not all USB flash drives require
>>rights. Some of them are installed without any problems (I get a new
>>letter
>>in explorer), but some of them need to install some kind of USB drivers to
>>work.
>>If a user is a local admin there is no problems, but I want to give
>>'normal
>>users' rights to do this without admin rights.
>>Can this be done? Thank you in advance for any informations and help.
>>Regards,
>>Miha
>
> Hi,
>
> I recently saw this message when we upgraded from IE6 to IE7. IE7
> "broke" the ability for the average Guest user to plug in a USB drive
> and it mount without any fuss. Uninstalling IE7 didn't help by the
> way. The only thing I could suggest is to se the following in your
> Group Policy:
>
> Local Computer Policy > Computer Configuration > Windows Settings >
> Security Settings > Local Policies > Security Options > Devices: Allow
> to format and eject removable media.
>
> Other than this, not sure what to tell you. People have told me normal
> XP behavior is to ask for Admin credentials to allow using a USB drive
> as a restricted user. It's never happened in all the years I've
> maintained XP at my location. Sorry I couldn't help more.
>
> - Thee Chicago Wolf