Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I want an account, which can not be in the Administrator group, to have direct access to \\.\PhysicalDrive1, which is an external USB disk. The disk may or may not contain partitions which is recognizable to Windows XP.

I have Administrator access to the machine to make the necessary setup, but I want to keep the user accounts which will do the actual access out of the Administrator group.

The closest information I have encountered regarding this is an article called Setting Device Object Registry Properties After Installation on MSDN, which I reckon could be used to add information to the HKLM\SYSTEM\CCS\Enum\USBSTOR\Disk&Ven_Xxx&Prod_Yyy&Rev_Zz key in the Registry.

share|improve this question
    
is driver installation out of bounds? –  hbdgaf Nov 30 '10 at 22:46
    
If you think of installing a custom driver which relay the requests, then it probably won't help in this case: I don't want to change the source code of the programs that need the access (VirtualBox, dd). –  RolKau Dec 1 '10 at 21:42
add comment

1 Answer

up vote 2 down vote accepted

Thanks to the magnificent answer by Oleg Kiriljuk to another question (please go and vote him up!), I was able to figure out how to call SetupDiSetDeviceRegistryProperty myself.

Thus, the DskACL utility which provides a command-line front-end was born; the homepage describes how to use it. If anyone is interested in hacking further on it, I've also put up a GitHub repository.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.