USB Drives/Devices and Local Permissions

Archived from groups: microsoft.public.win2000.security (More info?)

Hi,

We'd like to allow any users to be able to plug-in and install USB device
drivers on the local PC. While the Local Security - User Rights MMC can allow
you to assign the ability to 'add/remove device drivers' - would this be
sufficient as our users have no access to the registry with the exception of
HKEY_CURRENT_USER where they can make changes, they have a locked-down
desktop so they can do very little.

On similar subject - If the users' just unplug the USB device without
ejecting, I've heard this can cause problems - any way (aside from educating
them) we can limit the damage that could be done?