spacer home international search home2
spacer
Keynesis - Smart Software for Portable Devices
Enabling non adminstrative users to secure their removable drive

Who is this tutorial written for?
Computer and system administrators

Category:
Tutorials / Security

Brief introduction
Microsoft® Windows® comes with a factory setting that prevents non administrator users from formatting removable drives. One can argue for or against this preset but in real life this setting prevents non administrator users – especially in organizations – from using removable drive security applications, such as Keynesis Lockngo. Since users may delete the entire content of thier removable drives anyway, allowing them to format the removable device does not compromise system wide security.

Objectives
Removing the format limitation from removable drives for non administrator users without granting those users with administrative rights.

Operating systems
Windows XP
Windows 2003

Getting down to work
We will start with a word of caution: the Group Policy Editor is a powerful tool and should be used responsibly. Make sure you follow the instructions carefully and that you understand what you are doing.

Step 1: Run the Group Policy Editor (gpedit.msc)
Open the Run command line from the 'Start' > 'Run…' menu or by clicking the Window key + R.
Type 'gpedit.msc' (without the apostrophes) and click 'OK'

Step 2: The Group Policy Editor main window will appear

Step 3: Expand the tree until you get to the security options
The path is:
Local Computer Policy > Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options

Step 4: Open the policy named "Devices: Allowed to format and eject removable media"
You can access the properties of this policy by double-clicking on the policy or by right-clicking on the policy and choosing 'Properties'

Step 5: Changing the rule for the policy
Open the drop down menu as shown in picture

Step 6: Changing the rule for the policy (cont.)
Choose 'Administrator and Interactive users'

Step 7: Changing the rule for the policy (cont.)
Click the 'OK' button to confirm.

Step 8: Finishing off
Close the Group Policy Editor and reboot the computer for the changes to take effect.

When the computer starts following the reboot, normal users (non administrators) will be able to run security programs for the removable drives without limitations.