Announcement

Collapse
No announcement yet.

Allow users safely remove hardware

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Allow users safely remove hardware

    Ok,

    Anyone got a clue of the following?
    A customer want to allow it's users te safely remove its hardware like USB devices. (the little icon on the taskbar, it says: permission denied, when they try it..)

    I thought you need to be a local admin (or at least a power user) to do that, but i hoped that there is a policy which i can enable.

    anyone know the aswer for this?
    Marcel
    Technical Consultant
    Netherlands
    http://www.phetios.com
    http://blog.nessus.nl

    MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
    "No matter how secure, there is always the human factor."

    "Enjoy life today, tomorrow may never come."
    "If you're going through hell, keep going. ~Winston Churchill"


  • #2
    Re: Allow users safely remove hardware

    *bump*

    no one?
    Marcel
    Technical Consultant
    Netherlands
    http://www.phetios.com
    http://blog.nessus.nl

    MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
    "No matter how secure, there is always the human factor."

    "Enjoy life today, tomorrow may never come."
    "If you're going through hell, keep going. ~Winston Churchill"

    Comment


    • #3
      Re: Allow users safely remove hardware

      Hi

      Did you ever figure this one out?

      Thanks

      Chris
      Server 2000 MCP
      Development: ASP, ASP.Net, PHP, VB, VB.Net, MySQL, MSSQL - Check out my blog http://tonyyeb.blogspot.com

      ** Remember to give credit where credit is due and leave reputation points sigpic where appropriate **

      Comment


      • #4
        Re: Allow users safely remove hardware

        yes, we sorted out, but i on vacantion. When i'm back on business i will look it for you.
        Also you need to add the correct permissions on a cpl i thought.
        Marcel
        Technical Consultant
        Netherlands
        http://www.phetios.com
        http://blog.nessus.nl

        MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
        "No matter how secure, there is always the human factor."

        "Enjoy life today, tomorrow may never come."
        "If you're going through hell, keep going. ~Winston Churchill"

        Comment


        • #5
          Re: Allow users safely remove hardware

          Hi,

          Did you find out ? I also have a problem with this. I had tried google .... but no result. Anyone did it, please tell me.

          Thanks so much.
          Love in vain is better than love no one.

          Comment


          • #6
            Re: Allow users safely remove hardware

            I have come across this some time ago. I think it was because the taskbar was locked by GPO.

            Comment


            • #7
              Re: Allow users safely remove hardware

              It's a long time ago, and i'm no longer working on the customers site.
              However, i've sorted it out using filemon and regmon.
              It has to do with permissions.

              Edit: Old topic btw
              Marcel
              Technical Consultant
              Netherlands
              http://www.phetios.com
              http://blog.nessus.nl

              MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
              "No matter how secure, there is always the human factor."

              "Enjoy life today, tomorrow may never come."
              "If you're going through hell, keep going. ~Winston Churchill"

              Comment


              • #8
                Re: Allow users safely remove hardware

                Originally posted by Dumber View Post
                Old topic btw
                Indeed, but unlike other times when someone too out of the grave an old thread, this time nguyennp is looking for a solution. One of the purposes of the Search option in the forums, in my opinion.
                It will be nice to know the solution, Marcel.

                Sorin Solomon


                In order to succeed, your desire for success should be greater than your fear of failure.
                -

                Comment


                • #9
                  Re: Allow users safely remove hardware

                  Agree, however it's too long time ago to dig it up. I'm no longer working as a system administrator but as a networks/security specialist.
                  The only thing i can remember is that we founded the issue with Filemon and regmon.
                  Marcel
                  Technical Consultant
                  Netherlands
                  http://www.phetios.com
                  http://blog.nessus.nl

                  MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
                  "No matter how secure, there is always the human factor."

                  "Enjoy life today, tomorrow may never come."
                  "If you're going through hell, keep going. ~Winston Churchill"

                  Comment


                  • #10
                    Re: Allow users safely remove hardware

                    I'll try to reconstruct the environment in a test lab. Do you recall if it was an AD environment?

                    Sorin Solomon


                    In order to succeed, your desire for success should be greater than your fear of failure.
                    -

                    Comment


                    • #11
                      Re: Allow users safely remove hardware

                      Yes it was an Windows 2000 AD enviroment.
                      Edit: I've send my ex-Colleague an email if he remembered the solution.
                      Last edited by Dumber; 30th May 2007, 10:59.
                      Marcel
                      Technical Consultant
                      Netherlands
                      http://www.phetios.com
                      http://blog.nessus.nl

                      MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
                      "No matter how secure, there is always the human factor."

                      "Enjoy life today, tomorrow may never come."
                      "If you're going through hell, keep going. ~Winston Churchill"

                      Comment


                      • #12
                        Re: Allow users safely remove hardware

                        Ok after a little bit of digging into my memory:
                        The following you can try:
                        Allow the users to load/unload device drivers
                        (GPO -- computer settings -- windows settings -- security settings -- user right assignment)

                        Try if you can "stop it" via:
                        Code:
                        %SystemRoot%\System32\RUNDLL32.EXE shell32.dll,Control_RunDLL hotplug.dll
                        Marcel
                        Technical Consultant
                        Netherlands
                        http://www.phetios.com
                        http://blog.nessus.nl

                        MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
                        "No matter how secure, there is always the human factor."

                        "Enjoy life today, tomorrow may never come."
                        "If you're going through hell, keep going. ~Winston Churchill"

                        Comment


                        • #13
                          Re: Allow users safely remove hardware

                          Thanks.

                          I tried on my local computer, only Administrators group has that right (load/unload drivers). Yet, the user could safely remove hardware ( Ex: USB Pocket disk ) without problem. So I'm not sure if this right is correct for safely remove hardware or not.
                          I'm still searching for the answer.
                          Love in vain is better than love no one.

                          Comment


                          • #14
                            Re: Allow users safely remove hardware

                            nguyennp,
                            Have you already tried start monitoring with filemon and regmon?
                            Marcel
                            Technical Consultant
                            Netherlands
                            http://www.phetios.com
                            http://blog.nessus.nl

                            MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
                            "No matter how secure, there is always the human factor."

                            "Enjoy life today, tomorrow may never come."
                            "If you're going through hell, keep going. ~Winston Churchill"

                            Comment


                            • #15
                              Re: Allow users safely remove hardware

                              Originally posted by nguyennp View Post
                              Yet, the user could safely remove hardware ( Ex: USB Pocket disk ) without problem. So I'm not sure if this right is correct for safely remove hardware or not.
                              If you're running something newer than W2K (WXP or Vista) and you're mounting flash drives, etc. where the drive is set up for "Optimize for quick removal" per

                              My Computer\Right-click\Manage\Computer Management\Device Manager\Disk drives\<your USB drive>\Right-click\Properties\Policies

                              Then you can mount / dismount the device without issue.

                              If you see "Optimize for performance" checked instead, you need to be concerned for these users that cannot legitimately Stop the device through the Safely Remove Hardware icon in the system tray.
                              Cheers,

                              Rick

                              ** Remember to give credit where credit is due and leave reputation points sigpic where appropriate **

                              2006-2099 R Valstar. This post is offered "as is" for discussion purposes only with no express or implied warranty of any kind including, but not limited to, correctness or fitness for use. Nothing herein shall be construed as advice. Attempting any activity based on information in this post is done at your own risk.

                              Comment

                              Working...
                              X