Allow hardware installation for limited account
Solved
Anonymous user
-
yandros -
yandros -
Hello
I would like users on Windows XP Home with a limited account to still be able to use their USB flash drive even if it is not yet installed, which is denied! ... How can this security be bypassed?
Thank you very much, despite my research I haven't found anything interesting...
See you soon!
--
françois
I would like users on Windows XP Home with a limited account to still be able to use their USB flash drive even if it is not yet installed, which is denied! ... How can this security be bypassed?
Thank you very much, despite my research I haven't found anything interesting...
See you soon!
--
françois
18 answers
-
I just came across this topic. I'm going to explain how to allow USB keys for limited users.
First, open Windows as an administrator, then go to the Control Panel, select "Administrative Tools", and finally go to "Local Security Policy".
In this window, click on "Local Policies" and then "User Rights Assignment".
There, double-click on "Load and unload device drivers".
In this new window, click on "Add a new user or group", enter the name of the user(s), then click on "Check Names" and then OK.
Normally, the limited user can now load their USB keys.
I hope this answers the question. -
-
Hi
This message is quite old, and I still haven't found it :D
I switched the account to the "users" group. They can't install software, but they can use their USB drive.
The restrictions are less stringent than in a limited account, but they work for me.
To switch the account to another group, you go to start\run\Control Userpasswords2 -> ok
You click on the account in question, then on Properties, and in group membership, you change "Limited" to "Users".
Hoping this works for you too.
However, if you ever find a solution for the limited account, I would be interested to know it!
Have a good day.
François-
Hello,
Thank you for your reply. Indeed, I thought a limited account was the same as a user account but called by another name.
When you set an account to "user," it can't install programs (just read the partition and modify its profile), but by default, can it install a USB stick or does it require a little trick (registry, ...)?
Nice little "Control Userpasswords2" ;) You can even apply ctrl+alt+delete before opening a session.
Thank you for your reply, and have a good day.
Jean-Philippe- A user account that is part of the "users" group cannot install programs, but "simple tasks" like installing removable media (USB key, external drive) are possible.
Registry editing is indeed allowed.
However, it can be easily disabled by prohibiting "execute," for example.
I haven't tested it, but it seems that Poledit is effective for small security adjustments of this kind. It avoids the need to manually modify the registry.
Enabling Ctrl+Alt+Del for logging on seems like a good idea to me. However, it only works if you disable fast user switching from the user accounts settings by clicking "change the way users log on to their computers."
Have a nice day.
François
-
-
Hello
can you elaborate
you mean that, apart from an administrator, no one can use a USB key on your machine? -
I am an administrator.
I want to allow users with a limited account to install their USB key from their session.
I hope that this time I will be clearer... excuse me for my somewhat unclear post until now.
Fr -
Hi, it's up to you to configure the various accounts on your machine since you are the administrator. In the control panel, select them and modify them as needed.
By Labavure -
I don't want to change the account type; I want it to remain limited. I just want the restriction for hardware installation to be lifted.
How do I do that?
See you soon -
It's serious that there are some who don't understand you. You couldn't be clearer, though. I'm looking for the same solution too. If I find it, I'll let you know.
++ -
A tip that might help you: gpedit.msc in run.
This module can be very helpful.
Do you know how to set a limited account? Why do I not see limited in the list of account types?
Good evening ++-
Hi jp
So to set a limited account, you go to Control Userpasswords2, and it's the second option in group management, namely: "User with restricted access".
When I was looking into the USB key problem on the limited account, I was dealing with computers running XP Home. That's why gpedit.msc was never mentioned, because in XP Home you can't edit security policies. I think you have XP Professional. In that case, have fun because the possibilities are vast! You can right-click on the desktop, then manage. You'll have a "Computer Management" console. In "Local Users and Groups", then "Users", you'll see the list of accounts created on the machine. You can delete the ones you don't want, or disable them, like HelpAssistant or SUPPORT.
By the way: in control userpasswords2 you will see the Administrator user account. I advise you to rename it to something harder to guess, and especially to assign it a password. This is very important, because if someone tries to log into the machine via the internet, at the time of authentication they will just have to use "Administrator" as the login, and "" as the password. Since the default Administrator account is called "Administrator" and has no password, everyone knows it.
I hope I have given you good advice.
See you soon.
François- Regarding this, I forgot to add about the administrator account without a password: when you start a PC with Windows and you only have user accounts protected by passwords, you cannot log in if you don't know the passwords. In reality, you just need to boot in safe mode, and there the administrator account without a password appears. You log in, go to user account management, and you delete the passwords you want on any account. You restart the machine, and you have access to all user accounts.
That's also why it's dangerous to leave an administrator account without a password...!
Have a nice day.
François
-
-
Hello and thank you, François.
-
Thank you very much for the explanations. It's nice to see friendly people like you on the Internet.
Regarding the installation rights for USB keys on a limited account, I created a limited account as described in your explanations and the installation of the USB key worked perfectly while being logged in under this limited account.
Maybe you have a registry key with an incorrect parameter because I found a tip on Generation-nt to prevent the installation of a USB key. Perhaps this parameter has been installed on your machine and by doing the opposite of the explanation, it might work?
The link: https://www.generation-nt.com/desactiver-support-detection-cle-peripheriques-usb-astuce-24679-1.html
Hoping this helps you.
See you soon. -
-
Re,
When you're asked for the administrator password, try clicking OK and proceeding.
Let us know the result.
Al. -
I have never found the solution since this post. Especially if someone has found it, please feel free to share your discovery, as it would be interesting to know!
Happy holidays to all.
François -
Hello everyone, since Afideg is absent, I’ll respond in his place.
Download Tweak_UI_2.10.0.0_FR.exe
http://www.gratilog.net/francais/systeme/Tweak_UI_2.10.0.0_FR.exe
Run it, click on Startup/Logon on the right you have the list of sessions, select the session you want to appear and hit apply.
See you+++ -
Good evening,
Have you checked in the computer management (right-click on 'This PC' and select Manage) because I have this problem at work: the USB key installs fine but the letter is already in use and therefore it doesn’t appear in 'This PC'. I change the letter and it works. The next times, it takes the letter I assigned to it.
@+ -
Good evening D.B.F.O.E
Have you tried this:
Changing a drive letter
If Windows has assigned a letter that you do not like to one of your partitions, hard drives, or CD drives, here’s how to fix it.
To do this,
go to My Computer, Control Panel, Administrative Tools, and Computer Management.
In the Storage menu, click on Disk Management.
The right window is then divided into two parts.
In the upper part, your hard drives are displayed.
In the lower part, your different disk units are graphically represented.
Then right-click on the drive of your choice and select Change Drive Letter and Paths... .
Then click on the Change... button.
In the drop-down menu, choose the letter to assign, then click on the OK button.
This warning will then appear:
Changing the drive letter of a volume can prevent some programs from functioning. Do you really want to change this drive letter? Indeed, references (shortcuts, registry entries, etc.) to the location of programs on the disk whose letter you want to change will no longer be valid. You will then need to modify them later by changing the drive letter.
If you want to proceed, click on the OK button.
It should be noted that Windows cannot change the drive letter of your system or boot volume.
Good luck
Al.
--
Patience-Vigilance-Love. -
Hello, I also encountered the issue > request for administrator password to install a USB key with a user account. After searching through registry logs by a colleague, by deleting the following key:
HKLM\System\CurrentControlSet\Control\CoDeviceInstallers
The problem seems to be resolved.
++
