Solved

USB Passthrough on HP Thin Client

Posted on 2010-09-03
5
10,778 Views
Last Modified: 2013-11-11
I need to allow users to access their USB flash drives connected to their HP Thin Clients to passthrough to the terminal server.  We have HP t5740 terminals.  I have configured Local Resources on the RDP connection.  I have enabled the HP RDP USB Redirector service and it recognized the USB flash drive.

If I am logged in to the terminal as Administrator, everything works perfectly.  But if I am logged in as a user, the drive does not pass through to the Terminal Server session.  I believe it is a security policy on the terminal that does not allow the User account to access any local drives.  The User account does not have access to My Computer, Run command, or Task Manager.  If I open Internet Explorer and type the drive letter in the address bar, I get the following error:

Title: Address Bar
Message: Accessing the resource 'd:' has been disallowed.

(this works when logged in as Administrator)


1. Is there an easy way to allow USB passthrough on these HP Thin Clients.  The only reason we bought these more expensive terminals is for the USB ports.

2. Where are the local security policies being set?  I don't want to make the User account an admin, but if I could grant it access to the drives, that would be fine.  I have looked through the Local Security Policy snap-in, Symantec Endpoint Protection, and the Registry (but I don't know where to look).

HP support has not been able to help.  This shouldn't be this hard!  

Thanks in advance!
Jamison VanCleve
0
Comment
Question by:jamie177
  • 2
  • 2
5 Comments
 
LVL 23

Expert Comment

by:jeremyjared74
ID: 33600651
It is a registry setting. You can change it yourself, or use a registry entry tool listed here: http://www.howtogeek.com/howto/windows-vista/registry-hack-to-disable-writing-to-usb-drives/
0
 
LVL 23

Expert Comment

by:jeremyjared74
ID: 33600675
I know the auto reg entry file that the above link refers to, but I don't have the directory in my computer, but this site has the correct directory listing if you are attempting to edit the registry yourself: http://www.dexternights.com/2009/04/01/how-to-enable-usb-drives-usb-ports-and-usb-mass-storage-devices/
0
 

Author Comment

by:jamie177
ID: 33618073
Thank you for the suggestions jeremyjared74.  Unfortunately these did not work for me.  At this point, I don't think it is an issue with the terminal recognizing the USB drive.  I believe the terminal is locked down so tightly that the User account cannot access any local drives.
0
 
LVL 1

Expert Comment

by:WSNSD
ID: 33622743
Try this:

Log in to thin client (WES 2009 in my case) as administrator
unlock the HP Write Filter (EWF) via Control Panel if it is locked
Launch regedit
select the HKEY_Users key
File -> Load Hive
Browse to the ntuser.dat file at c:\documents and settings\User and open it (name it USER or something)
Expand HKEY_Users\USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
Change the NoDrives DWord to a decimal value of 33554439 if you want to block A: B: C: Z: (ramdrive) but allow access to other drive letters (in this case d: probably). (http://www.wisdombay.com/hidedrive/index.php is great for calculating this value for other drive letters)
Change the NoRun DWord to 0
Select the \HKEY_Users\USER key
File - > Unload Hive , yes
Close regedit
Re-lock the EWF (recommended)
Reboot!

USER should now be able to access the USB drive. You can muck with other registry keys to disable autorun, etc. as needed. This worked on the HP t5740W I tried it on.

Good luck!
0
 

Accepted Solution

by:
jamie177 earned 0 total points
ID: 33835119
Thank you all for your help, unfortunately I could not find a solution.
1

Featured Post

Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

Join & Write a Comment

Our Group Policy work started with Small Business Server in 2000. Microsoft gave us an excellent OU and GPO model in subsequent SBS editions that utilized WMI filters, OU linking, and VBS scripts. These are some of experiences plus our spending a lo…
This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now