|
Next: Problem with Links in Outlook 2003 Messages
|
| Author |
Message |
External
Since: Feb 12, 2008
Posts: 4
|
(Msg. 1) Posted: Tue Feb 12, 2008 9:17 am
Post subject: Device Installation - Elevated Privileges
Archived from groups: microsoft>public>windows>vista>administration_accounts_passwords (more info?)
|
|
|
Hi, I have a quesiton which has been bugging me since we rolled out Vista to
our desktops almost a years ago....
Whenever I have to go to a users PC to install a new device (USB Storage Key
for example) I usually have to spend about 10 minutes there as the Elevated
Privileges dialoge box will pop up several times, as each component of the
device tries to install itself...
Is there any way to set this up so that when you apporve a device for
installation, all the drivers and components for that device are also
approved for install - it's quite frustratring having to spend 10 minutes
doing a task which should take 30 seconds!
Thanks in advance for any help/advice
Mike Dower
Sys admin - Ministry of Sound |
|
| Back to top |
|
 | |
External
Since: Oct 24, 2004
Posts: 8
|
(Msg. 2) Posted: Wed Feb 13, 2008 12:52 am
Post subject: RE: Device Installation - Elevated Privileges [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
|
|
|
Hello Mike,
You can use Group Policy to change this setting.
MMC.exe, load snap-in, Group Policy, Local machine.
Local Computer Policy
-Windows Settings
- - Security Settings
- - - Local Policies
- - - - User Rights Assignment
- - - - - Load and unload device drivers
This user right determines which users can dynamically load and unload
device drivers or other code in to kernel mode. This user right does not
apply to Plug and Play device drivers. It is recommended that you do not
assign this privilege to other users.
Caution
Assigning this user right can be a security risk. Do not assign this user
right to any user, group, or process that you do not want to take over the
system.
Default on workstations and servers: Administrators.
Thanks,
Darrell Gorter[MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights
--------------------
|> Thread-Topic: Device Installation - Elevated Privileges
|> thread-index: AchtmxdrcPQDeEMKRuKxpKeDsyKiOw==
|> X-WBNR-Posting-Host: 62.244.189.242
|> From: =?Utf-8?B?TWlrZSBEb3dlcg==?= <MikeDower RemoveThis @discussions.microsoft.com>
|> Subject: Device Installation - Elevated Privileges
|> Date: Tue, 12 Feb 2008 09:17:06 -0800
|> Lines: 18
|> Message-ID: <A283328A-2127-47ED-B761-BB8AB5107138 RemoveThis @microsoft.com>
|> MIME-Version: 1.0
|> Content-Type: text/plain;
|> charset="Utf-8"
|> Content-Transfer-Encoding: 7bit
|> X-Newsreader: Microsoft CDO for Windows 2000
|> Content-Class: urn:content-classes:message
|> Importance: normal
|> Priority: normal
|> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2992
|> Newsgroups:
microsoft.public.windows.vista.administration_accounts_passwords
|> Path: TK2MSFTNGHUB02.phx.gbl
|> Xref: TK2MSFTNGHUB02.phx.gbl
microsoft.public.windows.vista.administration_accounts_passwords:8650
|> NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
|> X-Tomcat-NG:
microsoft.public.windows.vista.administration_accounts_passwords
|>
|> Hi, I have a quesiton which has been bugging me since we rolled out
Vista to
|> our desktops almost a years ago....
|>
|> Whenever I have to go to a users PC to install a new device (USB Storage
Key
|> for example) I usually have to spend about 10 minutes there as the
Elevated
|> Privileges dialoge box will pop up several times, as each component of
the
|> device tries to install itself...
|>
|> Is there any way to set this up so that when you apporve a device for
|> installation, all the drivers and components for that device are also
|> approved for install - it's quite frustratring having to spend 10
minutes
|> doing a task which should take 30 seconds!
|>
|> Thanks in advance for any help/advice
|>
|> Mike Dower
|> Sys admin - Ministry of Sound
|>
|> |
|
| Back to top |
|
| |
External
Since: Feb 12, 2008
Posts: 4
|
(Msg. 3) Posted: Wed Feb 13, 2008 12:52 am
Post subject: RE: Device Installation - Elevated Privileges [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
|
|
|
Hi Darrell,
Thanks for getting back to me......we actually restrict device installation
through the Device Installation GPO and block users installing devices such
as USB Keys, External HDDs etc as a way of locking down our desktops, so I
wouldn't want to grant users access to install Drivers in this way
My question was just that if I am going to a users desktop and saying 'ok,
you can use this device' is there a way of me just entering my Admin username
and password once and the elevated priviliges being applied to all subsequent
driver installs for that device at that time? Rather than the being promopted
to enter my logon each time a differn't component of the device needs to
downlod and install a driver?
Thanks again
Mike
""Darrell Gorter[MSFT]"" wrote:
> Hello Mike,
> You can use Group Policy to change this setting.
> MMC.exe, load snap-in, Group Policy, Local machine.
>
> Local Computer Policy
> -Windows Settings
> - - Security Settings
> - - - Local Policies
> - - - - User Rights Assignment
> - - - - - Load and unload device drivers
>
> This user right determines which users can dynamically load and unload
> device drivers or other code in to kernel mode. This user right does not
> apply to Plug and Play device drivers. It is recommended that you do not
> assign this privilege to other users.
> Caution
> Assigning this user right can be a security risk. Do not assign this user
> right to any user, group, or process that you do not want to take over the
> system.
> Default on workstations and servers: Administrators.
>
> Thanks,
> Darrell Gorter[MSFT]
>
> This posting is provided "AS IS" with no warranties, and confers no rights
> --------------------
> |> Thread-Topic: Device Installation - Elevated Privileges
> |> thread-index: AchtmxdrcPQDeEMKRuKxpKeDsyKiOw==
> |> X-WBNR-Posting-Host: 62.244.189.242
> |> From: =?Utf-8?B?TWlrZSBEb3dlcg==?= <MikeDower.TakeThisOut@discussions.microsoft.com>
> |> Subject: Device Installation - Elevated Privileges
> |> Date: Tue, 12 Feb 2008 09:17:06 -0800
> |> Lines: 18
> |> Message-ID: <A283328A-2127-47ED-B761-BB8AB5107138.TakeThisOut@microsoft.com>
> |> MIME-Version: 1.0
> |> Content-Type: text/plain;
> |> charset="Utf-8"
> |> Content-Transfer-Encoding: 7bit
> |> X-Newsreader: Microsoft CDO for Windows 2000
> |> Content-Class: urn:content-classes:message
> |> Importance: normal
> |> Priority: normal
> |> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2992
> |> Newsgroups:
> microsoft.public.windows.vista.administration_accounts_passwords
> |> Path: TK2MSFTNGHUB02.phx.gbl
> |> Xref: TK2MSFTNGHUB02.phx.gbl
> microsoft.public.windows.vista.administration_accounts_passwords:8650
> |> NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
> |> X-Tomcat-NG:
> microsoft.public.windows.vista.administration_accounts_passwords
> |>
> |> Hi, I have a quesiton which has been bugging me since we rolled out
> Vista to
> |> our desktops almost a years ago....
> |>
> |> Whenever I have to go to a users PC to install a new device (USB Storage
> Key
> |> for example) I usually have to spend about 10 minutes there as the
> Elevated
> |> Privileges dialoge box will pop up several times, as each component of
> the
> |> device tries to install itself...
> |>
> |> Is there any way to set this up so that when you apporve a device for
> |> installation, all the drivers and components for that device are also
> |> approved for install - it's quite frustratring having to spend 10
> minutes
> |> doing a task which should take 30 seconds!
> |>
> |> Thanks in advance for any help/advice
> |>
> |> Mike Dower
> |> Sys admin - Ministry of Sound
> |>
> |>
>
> |
|
| Back to top |
|
| |
External
Since: Oct 24, 2004
Posts: 8
|
(Msg. 4) Posted: Thu Feb 14, 2008 12:43 am
Post subject: RE: Device Installation - Elevated Privileges [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
|
|
|
Hello Mike,
Not that I am aware for that situation.
Thanks,
Darrell Gorter[MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights
--------------------
|> Thread-Topic: Device Installation - Elevated Privileges
|> thread-index: AchuHLgKTse8Vw2BQ6CeU2imlnZN6g==
|> X-WBNR-Posting-Host: 62.244.189.242
|> From: =?Utf-8?B?TWlrZSBEb3dlcg==?= <MikeDower RemoveThis @discussions.microsoft.com>
|> References: <A283328A-2127-47ED-B761-BB8AB5107138 RemoveThis @microsoft.com>
<NCaCErdbIHA.6372 RemoveThis @TK2MSFTNGHUB02.phx.gbl>
|> Subject: RE: Device Installation - Elevated Privileges
|> Date: Wed, 13 Feb 2008 00:45:00 -0800
|> Lines: 98
|> Message-ID: <24542A46-EF7B-45F4-A938-4EF02A50CC4F RemoveThis @microsoft.com>
|> MIME-Version: 1.0
|> Content-Type: text/plain;
|> charset="Utf-8"
|> Content-Transfer-Encoding: 7bit
|> X-Newsreader: Microsoft CDO for Windows 2000
|> Content-Class: urn:content-classes:message
|> Importance: normal
|> Priority: normal
|> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2992
|> Newsgroups:
microsoft.public.windows.vista.administration_accounts_passwords
|> Path: TK2MSFTNGHUB02.phx.gbl
|> Xref: TK2MSFTNGHUB02.phx.gbl
microsoft.public.windows.vista.administration_accounts_passwords:8671
|> NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
|> X-Tomcat-NG:
microsoft.public.windows.vista.administration_accounts_passwords
|>
|> Hi Darrell,
|>
|> Thanks for getting back to me......we actually restrict device
installation
|> through the Device Installation GPO and block users installing devices
such
|> as USB Keys, External HDDs etc as a way of locking down our desktops, so
I
|> wouldn't want to grant users access to install Drivers in this way
|>
|> My question was just that if I am going to a users desktop and saying
'ok,
|> you can use this device' is there a way of me just entering my Admin
username
|> and password once and the elevated priviliges being applied to all
subsequent
|> driver installs for that device at that time? Rather than the being
promopted
|> to enter my logon each time a differn't component of the device needs to
|> downlod and install a driver?
|>
|> Thanks again
|>
|> Mike
|>
|> ""Darrell Gorter[MSFT]"" wrote:
|>
|> > Hello Mike,
|> > You can use Group Policy to change this setting.
|> > MMC.exe, load snap-in, Group Policy, Local machine.
|> >
|> > Local Computer Policy
|> > -Windows Settings
|> > - - Security Settings
|> > - - - Local Policies
|> > - - - - User Rights Assignment
|> > - - - - - Load and unload device drivers
|> >
|> > This user right determines which users can dynamically load and unload
|> > device drivers or other code in to kernel mode. This user right does
not
|> > apply to Plug and Play device drivers. It is recommended that you do
not
|> > assign this privilege to other users.
|> > Caution
|> > Assigning this user right can be a security risk. Do not assign this
user
|> > right to any user, group, or process that you do not want to take over
the
|> > system.
|> > Default on workstations and servers: Administrators.
|> >
|> > Thanks,
|> > Darrell Gorter[MSFT]
|> >
|> > This posting is provided "AS IS" with no warranties, and confers no
rights
|> > --------------------
|> > |> Thread-Topic: Device Installation - Elevated Privileges
|> > |> thread-index: AchtmxdrcPQDeEMKRuKxpKeDsyKiOw==
|> > |> X-WBNR-Posting-Host: 62.244.189.242
|> > |> From: =?Utf-8?B?TWlrZSBEb3dlcg==?=
<MikeDower RemoveThis @discussions.microsoft.com>
|> > |> Subject: Device Installation - Elevated Privileges
|> > |> Date: Tue, 12 Feb 2008 09:17:06 -0800
|> > |> Lines: 18
|> > |> Message-ID: <A283328A-2127-47ED-B761-BB8AB5107138 RemoveThis @microsoft.com>
|> > |> MIME-Version: 1.0
|> > |> Content-Type: text/plain;
|> > |> charset="Utf-8"
|> > |> Content-Transfer-Encoding: 7bit
|> > |> X-Newsreader: Microsoft CDO for Windows 2000
|> > |> Content-Class: urn:content-classes:message
|> > |> Importance: normal
|> > |> Priority: normal
|> > |> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2992
|> > |> Newsgroups:
|> > microsoft.public.windows.vista.administration_accounts_passwords
|> > |> Path: TK2MSFTNGHUB02.phx.gbl
|> > |> Xref: TK2MSFTNGHUB02.phx.gbl
|> > microsoft.public.windows.vista.administration_accounts_passwords:8650
|> > |> NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
|> > |> X-Tomcat-NG:
|> > microsoft.public.windows.vista.administration_accounts_passwords
|> > |>
|> > |> Hi, I have a quesiton which has been bugging me since we rolled out
|> > Vista to
|> > |> our desktops almost a years ago....
|> > |>
|> > |> Whenever I have to go to a users PC to install a new device (USB
Storage
|> > Key
|> > |> for example) I usually have to spend about 10 minutes there as the
|> > Elevated
|> > |> Privileges dialoge box will pop up several times, as each component
of
|> > the
|> > |> device tries to install itself...
|> > |>
|> > |> Is there any way to set this up so that when you apporve a device
for
|> > |> installation, all the drivers and components for that device are
also
|> > |> approved for install - it's quite frustratring having to spend 10
|> > minutes
|> > |> doing a task which should take 30 seconds!
|> > |>
|> > |> Thanks in advance for any help/advice
|> > |>
|> > |> Mike Dower
|> > |> Sys admin - Ministry of Sound
|> > |>
|> > |>
|> >
|> >
|> |
|
| Back to top |
|
| |
| Related Topics: | Query for installation - I am begginer in using dBASE III PLUS. I heard that it requires floppy disks of dBASE but i don't have. I am having Windows XP. So i request you to help me in solving this problem and giving proper diections. Although I have downloaded dBASE III PLUS fro...
WMP11 Installation - I am running a Dell computer with XP SP2 (upgraded from Win ME). The computer is off the net. In trying to install WMP11 (it has WMP10 now) I get the message "player can only be installed on Windows XP SP2". Well, that is what the computer ...
Installation of a font problem - when i try to install a font i get this message "TrueType font is already installed. To install a new version, first remove the old version", but i can't see the font in the font directory or find font on pc. does any one have any ideas??
Automate IIS Installation - I would like to install IIS on a number of machines but do not want to go through the standard Windows Setup dialog box (add/remove programs - windows setup) If I put the IIS inf files and all other IIS files into a shared folder, how could I set it up....
Deny Software installation - XP Pro Can anyone tell me how to "Disallow" software installation for the "Guest" account? Right now the "Guest" account can install software, they just get the warning box "install program as other user" and... |
|
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
Hot
Bloated Email? DetachPipe for Outlook
Mac
Linux
Games
PDA
Mobile
FAQ
Search
Profile
Private Messages
Log in
Windows Forums
RSS