Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I want an account, which can not be in the Administrator group, to have direct access to \\.\PhysicalDrive1, which is an external USB disk. The disk may or may not contain partitions which is recognizable to Windows XP.

I have Administrator access to the machine to make the necessary setup, but I want to keep the user accounts which will do the actual access out of the Administrator group.

The closest information I have encountered regarding this is an article called Setting Device Object Registry Properties After Installation on MSDN, which I reckon could be used to add information to the HKLM\SYSTEM\CCS\Enum\USBSTOR\Disk&Ven_Xxx&Prod_Yyy&Rev_Zz key in the Registry.

share|improve this question
is driver installation out of bounds? – RobotHumans Nov 30 '10 at 22:46
If you think of installing a custom driver which relay the requests, then it probably won't help in this case: I don't want to change the source code of the programs that need the access (VirtualBox, dd). – RolKau Dec 1 '10 at 21:42
up vote 2 down vote accepted

Thanks to the magnificent answer by Oleg Kiriljuk to another question (please go and vote him up!), I was able to figure out how to call SetupDiSetDeviceRegistryProperty myself.

Thus, the DskACL utility which provides a command-line front-end was born; the homepage describes how to use it. If anyone is interested in hacking further on it, I've also put up a GitHub repository.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .