Frequently Asked Questions
Configuring Windows 2000/XP to Allow Restricted Users Access to Speedy
IntroductionWindows 2000 and Windows XP have the ability to set access rights to users. Users with restricted rights (those users other than users with Administrator rights) are not granted access to certain areas of the computer. Three areas of restriction come into play with Speedy. The first of which is the Windows Registry (Click Here for information on granting permissions to the Windows Registry for all BSI products), the second of which is hardware (the CD-ROM drive in particular), the third is file/folder access. This document is provided to walk users through the steps to enable restricted users access to the CD ROM drive so that Speedy can be used by restricted users without getting the error: "Cannot initialize any CD-ROM devices" or "ASPI Manager is not installed" when opening Speedy and also to gain full access to the C:\BSI32 folder so user preferences can be properly saved to avoid the error "Unable to save to speedy.ini". NOTE: Information contained in this document is not supported by Technical Support. Simian, and other BSI products, are intended to be run by users with Administrator user access rights; therefore, information in this document is for informational purposes only.
NOTE: This document gives steps to change user rights to key areas of Windows. Care should be taken to ensure that user rights are kept in line with your company policy on computer usage and access rights. Please consult your IT professional if you are not sure of your company policy on this matter.
- For all steps in this document, it is required that you be logged into your workstation as the local administrator account.
Figure 1: The Group Policy editor in Windows 2000 is shown with the “Restrict CD-ROM access to locally logged-on user only” option highlighted.
Figure 2: The Group Policy editor in Windows XP is shown with the “Devices: Restrict CD-ROM access to locally logged-on user only” option highlighted.
- Go to the Start menu and choose Run. In the “Open” field in the window that pops up, type “gpedit.msc” (without the quotes). The Group Policy Editor will open. In the left section containing the folder tree, browse through Local Computer Policy>Computer Configuration>Windows Settings>Security Settings>Local Policies>Security Options. With Security Options highlighted on the left, look in the list on the right side for "Restrict CD-ROM access to locally logged-on user only” if you are using Windows 2000, or if you are using Windows XP, look for “Devices: "Restrict CD-ROM access to locally logged-on user only” and right click on it and choose Properties.
Figure 3: The “Local Security Policy Setting” window is shown with the “Enabled” option selected.
- The “Local Security Policy Setting” window will pop up, select the "Enabled" option and click OK. You can also close out of the Group Policy editor at this time as well. Though choosing “Enabled” on an option that says it is to “Restrict access…” sounds the opposite of what is desired, it is the correct option to choose.
- Log off of the Windows administrator account and log back in as your normal Windows user. Speedy will now be able to access the CD-ROM drive properly as a restricted user.
Folder AccessNOTE: For this document’s purpose, we’ll be using the “Everyone” username, allowing any user that uses your machine (including network users) to access and change files. Check with your IT professional to make sure this is compliant with your company policy. If you want to grant specific users or groups access rights while denying others, you will need to consult with your IT professional. User specific rights administration is a more advanced function than can be covered in this document and it is beyond its scope.
- Browse to the folder C:\BSI32. Right click on the BSI32 folder and choose "Sharing and Security..."
- The BSI32 Properties window will pop up with the Sharing tab selected as shown in Figure 4. Enable the option for "Share this folder" if it isn't already enabled.
Figure 4: The 'BSI32 Properties' window is shown with the 'Share this folder' option enabled
- Click on the Permissions button. The "Permissions for BSI32" window will pop up as shown in Figure 5. If the "Everyone" user does not exist (or the particular user you desire) in the list, click on the "Add" button.
Figure 5: The 'Permissions for BSI32' window is shown with the 'Everyone' user added and all permissions enabled
- The "Select Users or Groups" window will pop up. In the "Enter the object names to select" field, enter "Everyone" (or your desired username) as shown in Figure 6 and click OK.
Figure 6: The 'Select Users or Groups' window is shown with the 'Everyone' user manually added
- You will be returned to the "Permissions for BSI32" window. Highlight the newly added entry for "Everyone". The lower half of the window will show the "Permissions for Everyone". As shown in Figure 5, enable the option for "Full Control" (the options for Change and Read will automatically enable as well) and click OK.
- Shut Down and Restart your computer for the changes to take effect and log in as your normal user. You will now be able to use Speedy as a restricted user.
Last updated Thu, Jul 10 2014 1:27pm