locked
USB devices don't always work in protected accounts RRS feed

  • Question


  • We use Steady State to protect our public access computers at the town libraries. We encourage our patrons to bring in USB flash drives to save their work, however, while some usb drives work fine, others are restricted. We do not allow any software to be installed on our public computers. I know that some usb drives attempt to install software so that may be causing the restrictions or they may require drivers to be installed in order to work correctly. Is there some workaround for this that won't impede our system security? Or is it totally dependent on the type of flash drive the user has?

    Thank you.
    TK
    Monday, August 18, 2008 8:12 PM

Answers

  •  

    Hi, if you allow users to use USB device, all USB devices are allowed by Windows SteadyState. However, on system level, USB driver conflicts can be encountered if we use several USB devices on the same computer. To workaround this issue, we can try another USB port or remove and reinstall USB driver. You can refer to the following steps to remove and reinstall USB controller (for Windows XP).

     

    Remove all the USB device drivers

    ===========================

    1. Disconnect all USB devices.

    2. Click Start, click Run, type CMD and click OK.

    3. In the DOS Prompt window, copy and paste the following command and press Enter at the end of each line:

     

    set devmgr_show_nonpresent_devices=1

    cd %SystemRoot%\system32

    start devmgmt.msc

     

    4. In the opened window, select View and then Show hidden devices.

    5. Expand the "Universal Serial Bus controllers" branch, right-click and click Uninstall on everything related to the problematic device or "Unknown Device".

    6. Search other branches and delete everything related to problematic device or "Unknown Device".

    7. Plug the problematic device to the USB port and install the latest drivers again.

    8. Test this issue. If the suggestion 1 cannot resolve the problem, please go to suggestion 2.

     

    Reinstall USB Controller

    ===========================

    First, please disconnect all USB devices. Then, go through the following steps:

     

    1. Click Start -> click Run.

    2. Type in "devmgmt.msc" and press Enter.

    3. In Device Manger, double click to expand "Universal Serial Bus Controllers".

    4. In the expanded menu, move down to the first item, right click and select Uninstall and click OK.

    5. Repeat the step 3 to uninstall all items under Universal Serial Bus controllers.

     

    Then, restart your computer and Windows XP will reinstall all controllers automatically.

     

    For more information about USB controller/driver, you can post in Windows XP or Windows Vista newsgroup:

     

    http://www.microsoft.com/communities/newsgroups/en-us/default.aspx?dg=microsoft.public.windowsxp.general

     

    http://www.microsoft.com/communities/newsgroups/en-us/default.aspx?dg=microsoft.public.windows.vista.general

     

    Hope this helps!

    Wednesday, August 20, 2008 5:34 AM

All replies

  •  

    Hi, if you allow users to use USB device, all USB devices are allowed by Windows SteadyState. However, on system level, USB driver conflicts can be encountered if we use several USB devices on the same computer. To workaround this issue, we can try another USB port or remove and reinstall USB driver. You can refer to the following steps to remove and reinstall USB controller (for Windows XP).

     

    Remove all the USB device drivers

    ===========================

    1. Disconnect all USB devices.

    2. Click Start, click Run, type CMD and click OK.

    3. In the DOS Prompt window, copy and paste the following command and press Enter at the end of each line:

     

    set devmgr_show_nonpresent_devices=1

    cd %SystemRoot%\system32

    start devmgmt.msc

     

    4. In the opened window, select View and then Show hidden devices.

    5. Expand the "Universal Serial Bus controllers" branch, right-click and click Uninstall on everything related to the problematic device or "Unknown Device".

    6. Search other branches and delete everything related to problematic device or "Unknown Device".

    7. Plug the problematic device to the USB port and install the latest drivers again.

    8. Test this issue. If the suggestion 1 cannot resolve the problem, please go to suggestion 2.

     

    Reinstall USB Controller

    ===========================

    First, please disconnect all USB devices. Then, go through the following steps:

     

    1. Click Start -> click Run.

    2. Type in "devmgmt.msc" and press Enter.

    3. In Device Manger, double click to expand "Universal Serial Bus Controllers".

    4. In the expanded menu, move down to the first item, right click and select Uninstall and click OK.

    5. Repeat the step 3 to uninstall all items under Universal Serial Bus controllers.

     

    Then, restart your computer and Windows XP will reinstall all controllers automatically.

     

    For more information about USB controller/driver, you can post in Windows XP or Windows Vista newsgroup:

     

    http://www.microsoft.com/communities/newsgroups/en-us/default.aspx?dg=microsoft.public.windowsxp.general

     

    http://www.microsoft.com/communities/newsgroups/en-us/default.aspx?dg=microsoft.public.windows.vista.general

     

    Hope this helps!

    Wednesday, August 20, 2008 5:34 AM

  • Thank you for the response. I want to make sure I understand what you are saying. Because these are public computers that have multiple users with many different devices, we will need to periodically do device driver cleanup. Is that correct? It has nothing to do with Steady State preventing the device from installing its driver when the device is plugged in?

    TK
    Wednesday, August 20, 2008 10:27 PM
  •  

    Yes, based on the symptom, this issue is not related to Windows SteadyState because if we do not allow the usage of USB device, this should be blocked every time you try to use it. I suggest you use the above solution and check if that works on one computer. Then you can use the method on other computers.

    Thursday, August 21, 2008 2:48 AM