microsoft.public.windowsxp.security_admin

geek-y-guy wrote:
> Hi All: I have an SBS2003 domain with a number of xppro sp2 clients.
> All the computers are members of the domain, and I've set up domain
> users for each computer.
>
> I have a USB scanner installed on one computer, and when a user logs
> on to the local machine, they can access the scanner, but if they log
> on using the domain account, they get an error when the scanner
> application tries to load the (presumably) USB drivers for the
> scanner.
> It seems like a local security policy issue, but I can't figure out
> what privileges the domain user needs to have the same access the
> local account has?

If the scanner is installed already, this is unlikely to be a driver issue.
More likely, the software you're using is expecting the user to have
administrative rights on the workstation in order to run the app.

First, I'd contact the software developer and ask for a workaround which
does *not* involve granting domain users admin rights - this is sloppy code,
and they need to fix it.

If you get nowhere with them, try downloading Process Monitor from Microsoft
(a cool Sysinternals tool) that will help you find out what areas of the
file system & registry the app expects to write to, so you can manually
edit/correct it.