Modify ACL for Restricted Users

[stupafried]

I'm looking for a way to modify the Restricted User ACL to allow installation of Plug and Play devices, specifically digital cameras.

Does anyone know how to do this?

Does anyone know the specific folders and/or registry keys that apply to this type of hardware installation?

I think I'll be able to use SetACL to make these changes, but I'm not sure which folders and registry keys are relevant to this.

Any info will be greatly appreciated. Thanks...

 

[1stITMAN]

Well !st of all you will check to see Where the drivers will go for the hardware.

http://support.microsoft.com/?kbid=178170

 

[bcastner]

You would want to have a registry monitor, a file monitor and possibly a process explorer in your tool kit. I am not convinced it is a ACL/DACL issue, at least in its entirety.

Fortunately, sysinternals.com has written freeware utilities to handles this chore:

http://www.sysinternals.com/ntw2k/utilities.shtml

You want RegMon, FileMon, and possible their Process Explorer.

Now do the installation as a user with local Administrator logon privileges. Record what happens to the registry and the file system.

One subtle issue is Group Policy. You may have to adjust the settings for logon as a batch file; logon as a service; any restrictions on local console logon only; the ability of restricted users to install or initialize services; and the ability to load or unload device drivers.

I know it is a pain, but you only have to do this once.