2

Short question: Can you use group policy to allow users to disable\enable devices without giving them full administrative rights to a machine?

More detailed: We have machines that crash on logoff\reboot when using a serial to usb adapter. The serial device was never designed to be abruptly disconnected by USB and it causes the OS to hang.

The fix was to write a program to detect logoff\reboot, block it them, disable the serial device, and then proceed to logoff. It works great with the exception that I have to grant users admin rights to the Windows machine.

Super1337
  • 474
  • 2
  • 4
  • 9
  • I don't understand why a logoff or reboot would cause the device to abruptly disconnect. That sounds like a wonky driver to me. – joeqwerty Oct 23 '15 at 05:19
  • There are some shocking USB-Serial drivers about. I'd advise getting a different adapter / driver (one that works!) FWIW I've tried to assign such permissions as you describe by group policy and was unable to make it work. – BlueCompute Oct 23 '15 at 12:27

1 Answers1

2

I learned that

Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Load and unload device drivers

Is the GPO that determines this.

Everything is running stable now

Super1337
  • 474
  • 2
  • 4
  • 9