?
Solved

xp sp3 prompts for admin rights to install usb mouse

Posted on 2011-04-19
14
Medium Priority
?
1,261 Views
Last Modified: 2012-05-11
I have a machine running XP SP3 which prompts for admin rights when ANY USB device is inserted. This is obviously of no use to our users as they can not insert a USB mouse or flash drive.
I'm tearing my hair out with it a little.
I've tried running SFC /Scannow, checked the permissions on the windows\inf folder and also tried removing the catroot2 folder.
Can anyone help with removing the prompt and allowing these USB devices to be installed by ordinary users.
0
Comment
Question by:CWilbourne
  • 6
  • 4
  • 2
  • +2
14 Comments
 
LVL 20

Expert Comment

by:Iain MacMillan
ID: 35423738
does any software need installed for these USB devices??  usually once they are connected and installed once, you should be able to remove/install at will afterwards.

have you tried adding the domain Default User group to the local Power User group of XP, and see if allows them to add/remove USB items (Power Users is also granted rights to add/remove printers  and change clock/time).
0
 
LVL 2

Author Comment

by:CWilbourne
ID: 35423963
Hi IainNIX,
Thanks for you reply.
No the devices don't normally need any software/drivers - they just use generic "windows" ones.. I'm only interested in allowing things like mice and USB flash sticks which use the generic "inbuilt" drivers
If I add the users into the power users group then the devices install but I am prevented from doing this by corporate policy....

Cheers

0
 
LVL 16

Expert Comment

by:rbudj
ID: 35423990
If you are on a domain, this could be a policy set by your system administrator and you will not be able to work around it. They probably have it in affect on purpose so you cannot use usb devices on the workstations. Check with your Systems Administrator.
0
What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

 
LVL 16

Expert Comment

by:rbudj
ID: 35424006
In re-reading your post, you seem to be the administrator yourself. Have you tried adding the user to the local Administrators group?
0
 
LVL 2

Author Comment

by:CWilbourne
ID: 35424020
Hiya,
I am the system administrator! And no I haven't set anything in GPO to restrict access.
In fact we have a couple of hundred PCs etc. which don't prompt to install these devices. It's only the latest batch ov Laptops which are doing so.

But thanks anyway.
0
 
LVL 20

Expert Comment

by:Iain MacMillan
ID: 35424476
unfortunate news on the corp policy, that's pretty strict in my book, but rules are rules and all that.

might also be an issue if the driver is not a signed one, then you will always get prompted for Admin rights -- are the drivers for these USB items already installed/signed?

Also check this link which has a program that allows users and power users to add USB flash drives, which may help you modify the files required by your USB mouse.

http://www.raymond.cc/blog/archives/2007/11/29/windows-requires-administrator-rights-to-install-usb-flash-drives/
0
 
LVL 7

Expert Comment

by:bill30
ID: 35424495
This may be a shot in the dark but check your registry settings:

Check the value in the registry at:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsbStor  for the Dword 'Start' is 3  (“Start”=dword:00000003)

I had to change this to remove some restrictions on USB drives/mice a while back.
0
 
LVL 2

Author Comment

by:CWilbourne
ID: 35424610
Thanks IainNIX.. I've tried that "fix" now but unfortunately it hasn't made any difference...

Bill30... I've checked the registry key you mentioned and it's already 3.

An interesting thing I've found is that once the device has been loaded once by supplying an admin password, it still prompts if unplugged/re-inserted BUT if the prompt is then just cancelled the device works???

0
 
LVL 20

Expert Comment

by:Iain MacMillan
ID: 35425326
any chance of just leaving the mice physically attached and secured/cable-tied to the systems...;)
0
 
LVL 2

Author Comment

by:CWilbourne
ID: 35425467
Well if the machines were desktops and it was just the mouse I'd be sorely tempted to cable-tie them together. As it is they're laptops and it's not just mice but flash drives etc. all of which are normally just installed without admin rights!!! ;-)

I may have found the solution to my own problem - I'm just running a few tests on a couple of the offending machines to make sure before I post it........
0
 
LVL 93

Expert Comment

by:nobus
ID: 35430790
can you test with another user profile?
0
 
LVL 2

Accepted Solution

by:
CWilbourne earned 0 total points
ID: 35439398
OK, I've done my tests and I have solved this myself.... I chrecked the setupapi.log (in C:\windows) when I inserted the USB device and it told me what files were "missing or didn't have a digital signature" (none were actually missing).
At first for the flash sticks it complained that USBSTOR.inf wasn't signed so I replaced it with a copy from a "working" machine. Then it complained about SYSSETUP.dll (in C:\windows\system32) which again I replaced with a copy from a "working" machine and hey presto  the ordinary users can insert mice and flash sticks without being prompted for an admin password.
I suspect that in fact only the SYSSETUP.dll file really needed replacing.
I have no idea how this file became changed/corrupted on my windows installation CD (the time stamp of it is actually different on the CD than the "working" copy???)  I've used the same CD several times before without any problems....
0
 
LVL 20

Expert Comment

by:Iain MacMillan
ID: 35442316
good to know you got it solved and this should be saved into the answer library for any future person with the same issue.
0
 
LVL 2

Author Closing Comment

by:CWilbourne
ID: 35499593
Found the answer myself after looking at the c:\windows\setupapi.log and seeing the files which windows complained about (not digitally signed, etc.) when inserting the USB devices.
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In the absence of a fully-fledged GPO Management product like AGPM, the script in this article will provide you with a simple way to watch the domain (or a select OU) for GPOs changes and automatically take backups when policies are added, removed o…
IF you are either unfamiliar with rootkits, or want to know more about them, read on ....
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

862 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question