I will look to see exactly how I did that and get back to you.

<shaun@blackfen.bexley.sch.uk> wrote in message
news:HKNBe.7032$Hc7.1668@prv-forum2.provo.novell.com...
> Found nothing obvious - Do you have any info on the Zen object?
>
>> Here are two links.
>> The first seems to indicate we have done all that we need to do to get
>> this
>> working.
>> The second talks about a number of things to prevent USB access.
>> Perhaps this may indicate some things that may have been done via some
>> other
>> policy that is catching you someplace.
>>
>> http://www.wown.com/nt/nt2000/atips/atips41.shtml
>> http://www.security-forums.com/forum...c.php?p=149904
>>
>>
>>
>>
>> <shaun@blackfen.bexley.sch.uk> wrote in message
>> news:ELrBe.5879$Hc7.3925@prv-forum2.provo.novell.com...
>> > That's an interesting idea.
>> >
>> >> While not ideal, should also be able to create a NAL app that points
>> >> to
>> >> the
>> >> add/remove hardware wizard as an unsecure system user.
>> >>
>> >> I had to do this as a workaround for one issue we had with one
>> >> revision
>> >> of a
>> >> build for a particular PC - Even administrators could not add
>> >> hardware.
>> >> We never figured out why, but I built a hardware wizard NAL app that
>> >> seemed
>> >> to give sufficient rights.
>> >>
>> >> "Craig Wilson" <craig_d_wilson@yahoo.com> wrote in message
>> >> news:iyrBe.5870$Hc7.2350@prv-forum2.provo.novell.com...
>> >> > Out of Curiosity, are they User or Power User?
>> >> > I don't see why this do not fix your problem, but I am going to dig
>> >> > a
>> >> > little bit to see if I can find the answer.
>> >> > I know there are some other USB related items I ran across recently
>> >> > so
>> >> > I
>> >> > will see if I can track them down.
>> >> >
>> >> > Unfortunately my main laptop blew up last night and I'm on an
>> >> > alternate
>> >> > one so I don't have most of my bookmarks and thread history readily
>> >> > available right now.
>> >> >
>> >> > <shaun@blackfen.bexley.sch.uk> wrote in message
>> >> > news:2qrBe.5867$Hc7.5763@prv-forum2.provo.novell.com...
>> >> >> Have given users full access to every folder on c:, have given them
>> >> >> write
>> >> >> permissions to HKLM and have run NTRights again - still no
>> >> >> difference
>> >> >> :(
>> >> >>
>> >> >>> Has made no difference so far - have specified both "everyone" and
>> >> >>> "users"
>> >> >>> groups to have specified rights - NTRights reports the change as
>> >> >>> Successful - But I'm still getting the same error message.
>> >> >>>
>> >> >>> > I found the tool at;
>> >> >>> >
>> >> >>> > http://www.petri.co.il/download_free_reskit_tools.htm
>> >> >>> >
>> >> >>> > Testing now.
>> >> >>> >
>> >> >>> > > I've used the "NTRights" utility in the past to grant the
>> >> >>> > > LoadDriverPrivilege to additional groups to resolve this
>> >> >>> > > issue.
>> >> >>> > >
>> >> >>> > > ntrights -u "GroupName" +r SeLoadDriverPrivilege
>> >> >>> > >
>> >> >>> > > I've verified this tool under Windows 2000 (Your OS, but not
>> >> >>> > > XP)
>> >> >>> > >
>> >> >>> > > I call the NTRights tool from a ZEN app running as an unsecure
>> >> >>> > > system
>> >> >>> > > user.
>> >> >>> > >
>> >> >>> > > You should be able to find ntrights floating around the net
>> >> >>> > > someplace or
>> >> >>> > > I could send you a copy.
>> >> >>> > >
>> >> >>> > >
>> >> >>> > >
>> >> >>> > > > Client OS; Windows 2000 SP4
>> >> >>> > > > Client Ver; 4.83-4.91
>> >> >>> > > >
>> >> >>> > > > When one of our Staff/Students plugs in a USB Mass storage
>> >> >>> > > > device
>> >> >> (ie a
>> >> >>> > > pen
>> >> >>> > > > drive), the Add New Hardware wizards appears as normal - But
>> >> >>> > > > on
>> >> >>> > > > the
>> >> >> last
>> >> >>> > > > screen of the wizard, an error appears;
>> >> >>> > > >
>> >> >>> > > > Completed the Found New Hardware Wizard
>> >> >>> > > > (Device Name)
>> >> >>> > > > An Error has occurred during the installation of the device
>> >> >>> > > > Access is denied.
>> >> >>> > > >
>> >> >>> > > > A screencapture of the error can be found at
>> >> >>> > > > http://www.blackfen.bexley.sch.uk/temp/usb.jpg
>> >> >>> > > >
>> >> >>> > > > I've tried just about everything I can think of - I've gone
>> >> >>> > > > through the
>> >> >>> > > > security policy, line-by-line - Nothing I change makes a
>> >> >>> > > > difference.
>> >> >>> > > > I've created a new security policy from scratch - No
>> >> >>> > > > difference.
>> >> >>> > > > I've given the everyone group full access to all registry
>> >> >>> > > > keys -
>> >> >> Nothing
>> >> >>> > > > I've given the everyone group full access to every folder on
>> >> >>> > > > c: -
>> >> >>> > > Nothing
>> >> >>> > > >
>> >> >>> > > > When I log onto a workstaion with Admin access, everything
>> >> >>> > > > works
>> >> >>> > > > fine.
>> >> >>> > > >
>> >> >>> > > > Any help/suggestions would be greatly appreciated.
>> >> >>> > > >
>> >> >>> > > > Shaun
>> >> >>> > >
>> >> >>> >
>> >> >>>
>> >> >>
>> >> >
>> >> >
>> >>
>> >>
>> >

>>
>>

>