Users prompted for Admin password when USB drive inserted....

Fonz-Valo · 6 Nov 2009 at 15:43

I hope some can help, I feel like banging my head against the wall with this one lol

I have recently created a new ghost image for use in the Music department where I work and whilst the image its self works well there is one problem that is giving me a headache.

When ever a non-admin user inserts a usb pen drive they are prompted for the administrator username and password to install it. Now this only happens on this system build and i'm having trouble discovering what could be causing it.....

Does anyone have any ideas?

The systems are running XP Pro SP3 if that helps

marc2003 · 6 Nov 2009 at 15:58

can't they just cancel the prompt and it still works ok. i remember getting these prompts when i used my local library for internet access. but my usb stick still appeared just fine.

not sure if there is a way to suppress the prompts at all? maybe someone else can answer that.

theheyes · 6 Nov 2009 at 16:33

The USB stick might be trying to install it's own software. Is autorun disabled in the local security policy?

Fonz-Valo · 6 Nov 2009 at 23:49

Autorun is disabled on all devices via group policy for security purposes.

The pen drives in question are generic pen drives that don't feature additional software

I've tried cancelling the prompts but then the device still refuses to install....

Fonz-Valo · 8 Nov 2009 at 21:03

anymore ideas guys?

Dewotter · 8 Nov 2009 at 21:11

I think by default standard users can only install hardware for USB drives that use signed drivers. If the drive doesn't use these then they will be prompted for admin credentials.

There is a security policy in Group Policy that allows non-admins to install non signed drivers.

Think its in Computer Configuration>Windows Settings>Security Settings>Local Policies>User Rights Assignment or Security Options.

Fonz-Valo · 8 Nov 2009 at 22:17

RKO said:
I think by default standard users can only install hardware for USB drives that use signed drivers. If the drive doesn't use these then they will be prompted for admin credentials.

There is a security policy in Group Policy that allows non-admins to install non signed drivers.

Think its in Computer Configuration>Windows Settings>Security Settings>Local Policies>User Rights Assignment or Security Options.

Thanks i'll check that out in the morning

danb21t · 8 Nov 2009 at 22:52

agree with RKO regarding digitally signed drivers, however as previously mentioned if the user cancels it should still show up as a removable device..

Try and find a usb device which would ask a limited user to install and plug it in under your account, then try again under a limited account and see whether that clears up the problem.

I wouldnt enable the ability to install non signed drivers personally.

Fonz-Valo · 13 Jan 2010 at 16:18

Sorry to drag this back up but the problem was caused by the "Novation Midi device software" after removing this normal USB support appeared...

I've since contacted the company but they still say the problem lies elsewhere even though i have tested it over and over and it is definitely caused by there software!

Oh well lol