Guest Lucas Williams Posted November 12, 2007 Posted November 12, 2007 Hello everyone. I have two windows server machines that I just deployed as upgrades to older windows 2000 servers. The system admin in the department has a done all the software setup for the servers, however, when we hook them up to the domain and log in, they do not have access to the local usb devices plugged in, which is critical for their function. I have added the user account to the local administrators group, and still no joy. If I log in locally as the administrator, everything works fine, but there is no access to the file shares on the network that are required for the printers. I have tried making changes in the local security policy, and that hasn't worked. If I log in, I have access to the USB devices and the shares, but that is because I am a domain admin. I don't want to give the user account domain admin privileges because the account is used on other computers that are not running Server 2003, and everyone in the department knows the user name and password for the account so they can restart the computers that don't run server and log back in. Thank you in advance for any assistance. If I need to be clearer or if you have any questions, feel free to ask. Thanks, Luke
Guest Meinolf Weber Posted November 12, 2007 Posted November 12, 2007 Re: Allowing USB Devices for normal users on Server 2003 Hello Lucas, How do your users connect to the server? Did they work locally on the server or via VPN/workstation? Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. ** Please do NOT email, only reply to Newsgroups ** HELP us help YOU!!! http://www.dts-l.org/goodpost.htm > Hello everyone. > I have two windows server machines that I just deployed as upgrades to > older > windows 2000 servers. The system admin in the department has a done > all the > software setup for the servers, however, when we hook them up to the > domain > and log in, they do not have access to the local usb devices plugged > in, > which is critical for their function. > I have added the user account to the local administrators group, and > still > no joy. If I log in locally as the administrator, everything works > fine, but > there is no access to the file shares on the network that are required > for > the printers. I have tried making changes in the local security > policy, and > that hasn't worked. If I log in, I have access to the USB devices and > the > shares, but that is because I am a domain admin. I don't want to give > the > user account domain admin privileges because the account is used on > other > computers that are not running Server 2003, and everyone in the > department > knows the user name and password for the account so they can restart > the > computers that don't run server and log back in. > Thank you in advance for any assistance. If I need to be clearer or if > you > have any questions, feel free to ask. > Thanks, > Luke
Guest Lucas Williams Posted November 12, 2007 Posted November 12, 2007 Re: Allowing USB Devices for normal users on Server 2003 The servers are for imaging. Basically, the users are on mac's, they send an image to be printed, it gets sent to a shared folder on the network. The two servers in question, monitor these shares, and when a file comes in, a program grabs the file, processes it, compiles it, and then sends it to another shared folder where another server grabs it, and sends it to the respective printer. The usb devices, connect the servers to each other so that if one gets over loaded, the other can pick up. The servers can see each other on the network, but the software that runs them can't use the network for load balancing, it uses the usb devices. When logged in via local administrator, they can see each other on the dongles, and on the network, but they don't have access to the network shares. Users have physical access the servers to enable and disable them for processing. The servers are running 24/7, and the users need to be able to get up, and disable the output when they are proofing images, and then re-enable them when they are ready to be imaged. The system admin in the department, needs to also have access to the USB devices so he can move configurations and setting from server to server via his thumbdrive. He can log out the user and log in the local Administrator account and do the changes, but doing this brings down an imager, which we can't have, they both have to be running. I hope this helps in finding an answer to my question. Thanks "Meinolf Weber" wrote: > Hello Lucas, > > How do your users connect to the server? Did they work locally on the server > or via VPN/workstation? > > Best regards > > Meinolf Weber > Disclaimer: This posting is provided "AS IS" with no warranties, and confers > no rights. > ** Please do NOT email, only reply to Newsgroups > ** HELP us help YOU!!! http://www.dts-l.org/goodpost.htm > > > Hello everyone. > > I have two windows server machines that I just deployed as upgrades to > > older > > windows 2000 servers. The system admin in the department has a done > > all the > > software setup for the servers, however, when we hook them up to the > > domain > > and log in, they do not have access to the local usb devices plugged > > in, > > which is critical for their function. > > I have added the user account to the local administrators group, and > > still > > no joy. If I log in locally as the administrator, everything works > > fine, but > > there is no access to the file shares on the network that are required > > for > > the printers. I have tried making changes in the local security > > policy, and > > that hasn't worked. If I log in, I have access to the USB devices and > > the > > shares, but that is because I am a domain admin. I don't want to give > > the > > user account domain admin privileges because the account is used on > > other > > computers that are not running Server 2003, and everyone in the > > department > > knows the user name and password for the account so they can restart > > the > > computers that don't run server and log back in. > > Thank you in advance for any assistance. If I need to be clearer or if > > you > > have any questions, feel free to ask. > > Thanks, > > Luke > > >
Guest Meinolf Weber Posted November 12, 2007 Posted November 12, 2007 Re: Allowing USB Devices for normal users on Server 2003 Hello Lucas, This scenario is not really dependend only on windows i think. Is the software that monitors everything fully compatible with 2003? Did you talk to the vendor of it? Think that's more the part of this software company. Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. ** Please do NOT email, only reply to Newsgroups ** HELP us help YOU!!! http://www.dts-l.org/goodpost.htm > The servers are for imaging. Basically, the users are on mac's, they > send an > image to be printed, it gets sent to a shared folder on the network. > The two > servers in question, monitor these shares, and when a file comes in, a > program grabs the file, processes it, compiles it, and then sends it > to > another shared folder where another server grabs it, and sends it to > the > respective printer. The usb devices, connect the servers to each other > so > that if one gets over loaded, the other can pick up. The servers can > see each > other on the network, but the software that runs them can't use the > network > for load balancing, it uses the usb devices. When logged in via local > administrator, they can see each other on the dongles, and on the > network, > but they don't have access to the network shares. > Users have physical access the servers to enable and disable them for > processing. The servers are running 24/7, and the users need to be > able to > get up, and disable the output when they are proofing images, and then > re-enable them when they are ready to be imaged. > The system admin in the department, needs to also have access to the > USB > devices so he can move configurations and setting from server to > server via > his thumbdrive. He can log out the user and log in the local > Administrator > account and do the changes, but doing this brings down an imager, > which we > can't have, they both have to be running. > I hope this helps in finding an answer to my question. > Thanks > "Meinolf Weber" wrote: >> Hello Lucas, >> >> How do your users connect to the server? Did they work locally on the >> server or via VPN/workstation? >> >> Best regards >> >> Meinolf Weber >> Disclaimer: This posting is provided "AS IS" with no warranties, and >> confers >> no rights. >> ** Please do NOT email, only reply to Newsgroups >> ** HELP us help YOU!!! http://www.dts-l.org/goodpost.htm >>> Hello everyone. >>> I have two windows server machines that I just deployed as upgrades >>> to >>> older >>> windows 2000 servers. The system admin in the department has a done >>> all the >>> software setup for the servers, however, when we hook them up to the >>> domain >>> and log in, they do not have access to the local usb devices plugged >>> in, >>> which is critical for their function. >>> I have added the user account to the local administrators group, and >>> still >>> no joy. If I log in locally as the administrator, everything works >>> fine, but >>> there is no access to the file shares on the network that are >>> required >>> for >>> the printers. I have tried making changes in the local security >>> policy, and >>> that hasn't worked. If I log in, I have access to the USB devices >>> and >>> the >>> shares, but that is because I am a domain admin. I don't want to >>> give >>> the >>> user account domain admin privileges because the account is used on >>> other >>> computers that are not running Server 2003, and everyone in the >>> department >>> knows the user name and password for the account so they can restart >>> the >>> computers that don't run server and log back in. >>> Thank you in advance for any assistance. If I need to be clearer or >>> if >>> you >>> have any questions, feel free to ask. >>> Thanks, >>> Luke
Guest Lucas Williams Posted November 12, 2007 Posted November 12, 2007 Re: Allowing USB Devices for normal users on Server 2003 Hello, It probably is something on the software side, because one server is running fine, and they are both set up identical. The local admin thinks that it is something on his end, but isn't sure. I am just making sure that my basis is covered. However, I still have the problem that we don't have access to USB Thumbdrives unless you are an administrator. Thanks for all your help. Luke "Meinolf Weber" wrote: > Hello Lucas, > > This scenario is not really dependend only on windows i think. Is the software > that monitors everything fully compatible with 2003? Did you talk to the > vendor of it? Think that's more the part of this software company. > > Best regards > > Meinolf Weber > Disclaimer: This posting is provided "AS IS" with no warranties, and confers > no rights. > ** Please do NOT email, only reply to Newsgroups > ** HELP us help YOU!!! http://www.dts-l.org/goodpost.htm > > > The servers are for imaging. Basically, the users are on mac's, they > > send an > > image to be printed, it gets sent to a shared folder on the network. > > The two > > servers in question, monitor these shares, and when a file comes in, a > > program grabs the file, processes it, compiles it, and then sends it > > to > > another shared folder where another server grabs it, and sends it to > > the > > respective printer. The usb devices, connect the servers to each other > > so > > that if one gets over loaded, the other can pick up. The servers can > > see each > > other on the network, but the software that runs them can't use the > > network > > for load balancing, it uses the usb devices. When logged in via local > > administrator, they can see each other on the dongles, and on the > > network, > > but they don't have access to the network shares. > > Users have physical access the servers to enable and disable them for > > processing. The servers are running 24/7, and the users need to be > > able to > > get up, and disable the output when they are proofing images, and then > > re-enable them when they are ready to be imaged. > > The system admin in the department, needs to also have access to the > > USB > > devices so he can move configurations and setting from server to > > server via > > his thumbdrive. He can log out the user and log in the local > > Administrator > > account and do the changes, but doing this brings down an imager, > > which we > > can't have, they both have to be running. > > I hope this helps in finding an answer to my question. > > Thanks > > "Meinolf Weber" wrote: > >> Hello Lucas, > >> > >> How do your users connect to the server? Did they work locally on the > >> server or via VPN/workstation? > >> > >> Best regards > >> > >> Meinolf Weber > >> Disclaimer: This posting is provided "AS IS" with no warranties, and > >> confers > >> no rights. > >> ** Please do NOT email, only reply to Newsgroups > >> ** HELP us help YOU!!! http://www.dts-l.org/goodpost.htm > >>> Hello everyone. > >>> I have two windows server machines that I just deployed as upgrades > >>> to > >>> older > >>> windows 2000 servers. The system admin in the department has a done > >>> all the > >>> software setup for the servers, however, when we hook them up to the > >>> domain > >>> and log in, they do not have access to the local usb devices plugged > >>> in, > >>> which is critical for their function. > >>> I have added the user account to the local administrators group, and > >>> still > >>> no joy. If I log in locally as the administrator, everything works > >>> fine, but > >>> there is no access to the file shares on the network that are > >>> required > >>> for > >>> the printers. I have tried making changes in the local security > >>> policy, and > >>> that hasn't worked. If I log in, I have access to the USB devices > >>> and > >>> the > >>> shares, but that is because I am a domain admin. I don't want to > >>> give > >>> the > >>> user account domain admin privileges because the account is used on > >>> other > >>> computers that are not running Server 2003, and everyone in the > >>> department > >>> knows the user name and password for the account so they can restart > >>> the > >>> computers that don't run server and log back in. > >>> Thank you in advance for any assistance. If I need to be clearer or > >>> if > >>> you > >>> have any questions, feel free to ask. > >>> Thanks, > >>> Luke > > >
Recommended Posts