IWETHEY v. 0.3.0 | TODO
1,095 registered users | 0 active users | 0 LpH | Statistics
Login | Create New User
IWETHEY Banner

Welcome to IWETHEY!

New My "employer" has disabled my USB flash drive
This was available to me when I bought the laptop. Now, I plug it in, the Windows Explorer display flickers briefly, like it used to do before it displayed the device, except that now, nothing shows up. Digging into the control panel is no help at all.

I'm pissed because these bastards think that they have the right to fuck with MY laptop!!! How do I get the flash drive to appear once again?

lincoln
"Windows XP has so many holes in its security that any reasonable user will conclude it was designed by the same German officer who created the prison compound in "Hogan's Heroes." - Andy Ihnatko, Chicago Sun-Times
[link|mailto:bconnors@ev1.net|contact me]
New Mapped any network drives lately?
If a network drive is overlapping where the USB drive is pointed at, that can cause some strange issues.
Nobody wins in a butter eating contest
New Yes, but not by choice
All the setup routines from the corp intranet mapped several drives for communal work, starting at drive E: (right after the DVD/CD burner).

So how do I know where the flash drive wants to go, and how to redirect it (if that's possible)?
lincoln
"Windows XP has so many holes in its security that any reasonable user will conclude it was designed by the same German officer who created the prison compound in "Hogan's Heroes." - Andy Ihnatko, Chicago Sun-Times
[link|mailto:bconnors@ev1.net|contact me]
New XP/Win2k?
If so, find a "My Computer" icon, right-click on it, and select "manage". (This is the easiest way to get there that I know of. Peter probably knows the mmc.exe command, though.)

Under Storage, select Disk Management, and make sure you've plugged in your USB thumbdrive. It might show up as one of the mapped drives, just rightclick, select Change Drive Letter and Paths, and follow the directions.

Oh, and if you'd like, I can tell your admins they're a bunch of idiots - you start network drives at Z and work your way back down for just that reason.
Nobody wins in a butter eating contest
New Myself, I avoide Z
Used to have lots of problems with software that had previously run on a Novell network where drive Z had special meaning.
[link|http://www.aaxnet.com|AAx]
New you solved my problem
I'm running XP Pro. Following your suggestion to relocate the flash drive letter, it now works fine. I originally assumed that they did something underneath the hood to prevent my using it to "protect" their network from viruses. But they require certain network shares to have specific drive letters mapped, and one is E: - where the flash drive went originally.

I still don't like having to use a login with password when I'm home on the laptop, but their installations have affected the only other userid I had created when I booted it the first time. Changing the userid is meaningless since it throws an error msg saying that the "domain is invalid". Well, DUH! I'm not connected to their network at home.
lincoln
"Windows XP has so many holes in its security that any reasonable user will conclude it was designed by the same German officer who created the prison compound in "Hogan's Heroes." - Andy Ihnatko, Chicago Sun-Times
[link|mailto:bconnors@ev1.net|contact me]
Expand Edited by lincoln April 13, 2004, 10:12:50 AM EDT
New Have you tried changing to the "local machine" domain?
When you go to the login, if you click the "Advanced" button (I'm doing this out of memory, so it could be called something else) it will show a third field, containing your work domain. If you select the dropdown box, your machine name should be there as well. Enter your "old" user name + password, and you should be in.

By the way, if your old user name didn't have a password, give it one yesterday. That's not very secure. :P
Nobody wins in a butter eating contest
New "local machine" domain
When I'm at work, it's connected to the company intranet and must be logged into their domain. When I'm home, it's not connected to anything; thus, it's extremely secure.

I'll try your tip tonight - I've got too much junk on the brain to remember the easy stuff like this. Thanks for giving me a refresher course.
lincoln
"Windows XP has so many holes in its security that any reasonable user will conclude it was designed by the same German officer who created the prison compound in "Hogan's Heroes." - Andy Ihnatko, Chicago Sun-Times
[link|mailto:bconnors@ev1.net|contact me]
New Try unplugging it at work
and then log into your local domain.



"Lady I only speak two languages, English and Bad English!" - Corbin Dallas "The Fifth Element"

New Your tip didn't work
Fired up the laptop, and at the login screen I clicked on the Options button to display the "Log On To" domain drop-down list box. The name I gave the machine at the very first boot up is not there. Only choices are domains from the client's network. Tried to restart and logging in as another user: no dice. It wouldn't let me type in the original name I gave the machine - could only select client's domain names.

I'm open to suggestions.
lincoln
"Windows XP has so many holes in its security that any reasonable user will conclude it was designed by the same German officer who created the prison compound in "Hogan's Heroes." - Andy Ihnatko, Chicago Sun-Times
[link|mailto:bconnors@ev1.net|contact me]
New They must have removed it
when you logged onto their network. They have scripts that can reconfigure your Windows configuration and remove the local machine entry.

Can you try "Safe Mode"? Hit F8 when it says "Windows XP....". Maybe you can try to recreate the local account? Log into Safe Mode, click on Control Panel, open up the System icon. Click on "Computer Name" and then hit "Change". Does it show your Workgroup or Domain name there? If Domain, don't change anything or else an administrator will have to add your system back into it when you get back in. If it is a workgroup, you can change the workgroup to something else. If you change from domain to workgroup, it will erase the domain, and you do not want that. I suspect you have Domains configured. If so, then you don't have XP Home, as it does not support domains.

Workgroup and Domains joining are expained here:
[link|http://www.lpt.com/windowsnetworking/regusers/wxpjoind.htm|http://www.lpt.com/w...sers/wxpjoind.htm]

While in Safe Mode, see what you can modify in the Administration tools:
Open up the Local Security Policy from the Administrative Tools in the Control Panel. Under Local Policies, User Rights Assignment check that the Log on locally item contains the following groups:

Administrators
Guest
Power Users
Users

Chances are they removed all of these groups so nobody can log into the machine locally, and only from a network account.

I am unable to locate where the local computer account is stored that can be switched off and on.

In safe mode do this:

Click on Star Menu, choose Run, type this in:
control userpasswords2

Hit Enter.

Do you see any user names for the computer? If not, they wiped them all out. Some BOFH zapped them. Click ADD to add in the Administrator account, etc.

One way to trick it is to set up an NT 4.0 Server or Windows 2000 Server, or Linux server with a SAMBA server using the same Domain name as your work uses, but at home. Do you have a second machine to log into?



"What's the use of saving life when you see what you do with it?" - Corbin Dallas "The Fifth Element"

New Don't do any of this, Linc.
1. If you ain't got admin, you can't add admin.
2. IT will kick yo sorry ass and tell your boss.
3. You're a busy dude, you've got better things to do.
4. Phone it into the helpdesk and make it clear to your boss that this is causing you a problem.
5. The reason nothing will work while you're logging into the domain is "Dude. You got a policy!". You cannot circumvent this.


Peter
[link|http://www.debian.org|Shill For Hire]
[link|http://www.kuro5hin.org|There is no K5 Cabal]
[link|http://guildenstern.dyndns.org|Blog]
New Can I create an Admin account
that doesn't care if I'm on the network? Or will this policy BS keep biting me in the ass?
lincoln
"Windows XP has so many holes in its security that any reasonable user will conclude it was designed by the same German officer who created the prison compound in "Hogan's Heroes." - Andy Ihnatko, Chicago Sun-Times
[link|mailto:bconnors@ev1.net|contact me]
New Who owns the hardwre?
If you own the machine, and your use of it is limited by their restrictions, then they need to supply you with one of their own.
-----------------------------------------
It is much harder to be a liberal than a conservative. Why?
Because it is easier to give someone the finger than it is to give them a helping hand.
Mike Royko
New Me
it was a condition to the job offer, since neither the client nor the contract shop would provide a unit or subsidize my purchasing one. Unfortunately, I've been told by the manager onsite (employee of the pimp shop) that that's the way it is, so live with it.

lincoln
"Windows XP has so many holes in its security that any reasonable user will conclude it was designed by the same German officer who created the prison compound in "Hogan's Heroes." - Andy Ihnatko, Chicago Sun-Times
[link|mailto:bconnors@ev1.net|contact me]
New And employers wonder why people aren't loyal to them.
--\n-------------------------------------------------------------------\n* Jack Troughton                            jake at consultron.ca *\n* [link|http://consultron.ca|http://consultron.ca]                   [link|irc://irc.ecomstation.ca|irc://irc.ecomstation.ca] *\n* Kingston Ontario Canada               [link|news://news.consultron.ca|news://news.consultron.ca] *\n-------------------------------------------------------------------
New I would advise to sit tight
I think you need that job more than you need the control of your computer right now.
--

Buy high, sell sober.
New I think there are only 2 solutions.
1) Talk to the IT support people at your employer and explain your situation.

2) Install BootIt-NG (or similar) and install another OS on a separate partition that you control. (I'd vote for this one myself.)

Best of luck.

Cheers,
Scott.
New Agreed.
Luckily, making your account an administrator is as simple as having somebody with admin rights on the machine type:

"net localgroup administrator <domain><username> /add"

at a command prompt on the machine.

Be careful before you walk into this, though - I don't remember the details of how your laptop got on their domain, but some admin types get nervous when somebody walks in with their own machine. I've recently been through this with a contractor here at work, really got down on their case about security big-time.
Nobody wins in a butter eating contest
New Re: My "employer" has disabled my USB flash drive
They probably applied a security policy when you logged in to or connected to their network.
qts
New If that is the case
then disconnect the network cable, power off and reboot. Log in and then see if you can use the USB drive. IIRC policies are loaded from the network, at least it used to work that way with Windows 9X. I also remember that removing the group policies application would also get the same thing. I think W2K and XP have this built in now.

If it is your laptop, run a software firewall program and then block access to the part of Windows that handles group policies. If it cannot load the policies from the server, it cannot apply them.

Anyway if you use Wireless, disable the Wireless connection, or unplug the cable for the wire connection. Then reboot the computer and change the policies yourself if they are sticking:

For XP Pro:
[link|http://www.theeldergeek.com/group_policy_editor.htm|http://www.theelderg...policy_editor.htm]

For Windows 2000 you can edit the policies to what you want and then do this:
[link|http://msdn.microsoft.com/library/default.asp?url=/library/en-us/gp/228.asp|http://msdn.microsof.../en-us/gp/228.asp]

It will disable ADM updates, so they cannot change it back.

Apparently you may have to modify your Active Directory entries and hope that they do not change back when you log back onto their network.

Just log on with an administrative account, not to their domain, but your local computer name. You won't be on their network, but you can modify whatever you want on your laptop and access your USB flash drive.

Personally I usually start network shares at N, O, or P, myself. Unless it is Netware which uses Z, Y, X, L, etc. If Netware never will be used, I assign CD/DVD, Zip drives, etc to Z, Y, X, if it is used I assign them to Q, R, S or whatever network drives are not being used.

Only Newbies, Nitwits, PHBs, and Brain-Dead System Administators assign network drives to D, E, F. Like the last few places I worked at did that. Then when that 6G drive was used with NT 4.0, they only used 2G of it for C, and left 4G unused because it would conflict with network drives. NT 4.0 would not allow them to format all of the drive due to a BIOS limitation and had limited it to 2G chunks. The CD-ROM was moved to Z, after programs were installed, which resulted in funny errors when the apps tried to look for the source CD. How these people got Microsoft Certification is beyond me, must have gotten the test answers off of the Internet?

Oh yeah at the law firm, a login script would clear out the Outlook configuration, and a partner that tried to use a Datalink watch and PDA to synch with Outlook kept finding his settings were missing after every reboot. They refused to do anything about it because they do not support those devices at the time. So instead I took the part of the registry that saved the settings and made a REG file, and had him click on that file before he did the synching. It was a work-a-round for boneheaded management.



"Lady I only speak two languages, English and Bad English!" - Corbin Dallas "The Fifth Element"

New now this sucks
fired up gpedit.msc and get an error message: "Snap-in Creation Failed." The window pane that appears after that repeats the message and adds:

"The snap-in is not created, it may not be installed properly."
Name: Group Policy
CLSID: { ... }


Now what?
lincoln
"Windows XP has so many holes in its security that any reasonable user will conclude it was designed by the same German officer who created the prison compound in "Hogan's Heroes." - Andy Ihnatko, Chicago Sun-Times
[link|mailto:bconnors@ev1.net|contact me]
New Your employer has a help desk/tech support area?
Obviously this is slowing you down in your work, so it's in their interest to get it to work. Have you tried just ringing the help desk and explaining the issue? It's a crazy plan, but they just might go 'Aw. Never thought of that.' and fix it in minutes.

Or not, but it never hurts to be optimistic.
John. Busy lad.
New Settle down
Try this link:
[link|http://www.windowsxpuser.com/forums/viewtopic.php?p=13967|http://www.windowsxp...topic.php?p=13967]

If you have XP Home, XP Home just won't use that feature. Which is why you got the error. XP Pro is really the way to go, XP Home is the peon/luser version of XP. I tell people this, but noody ever believes me.

Expert's Exchange has this on it:
[link|http://www.experts-exchange.com/Operating_Systems/WinXP/Q_20733337.html|http://www.experts-e...P/Q_20733337.html]

Also the abuse^H^H^H^H^Husegroup has this to say about it:
[link|http://www.derkeiler.com/Newsgroups/microsoft.public.windowsxp.security_admin/2003-03/3275.html|http://www.derkeiler...2003-03/3275.html]

I hope one of these helps you.





"What's the use of saving life when you see what you do with it?" - Corbin Dallas "The Fifth Element"

New He doesn't have XP Home.
He wouldn't be able to connect to the domain if it was XP Home.

My guess is they're using group policy to disable certain items in an attempt to secure the network.
Nobody wins in a butter eating contest
     My "employer" has disabled my USB flash drive - (lincoln) - (24)
         Mapped any network drives lately? - (inthane-chan) - (17)
             Yes, but not by choice - (lincoln) - (16)
                 XP/Win2k? - (inthane-chan) - (15)
                     Myself, I avoide Z - (Andrew Grygus)
                     you solved my problem - (lincoln) - (13)
                         Have you tried changing to the "local machine" domain? - (inthane-chan) - (12)
                             "local machine" domain - (lincoln) - (1)
                                 Try unplugging it at work - (orion)
                             Your tip didn't work - (lincoln) - (9)
                                 They must have removed it - (orion) - (8)
                                     Don't do any of this, Linc. - (pwhysall) - (7)
                                         Can I create an Admin account - (lincoln) - (6)
                                             Who owns the hardwre? - (Silverlock) - (3)
                                                 Me - (lincoln) - (2)
                                                     And employers wonder why people aren't loyal to them. -NT - (jake123)
                                                     I would advise to sit tight - (Arkadiy)
                                             I think there are only 2 solutions. - (Another Scott) - (1)
                                                 Agreed. - (inthane-chan)
         Re: My "employer" has disabled my USB flash drive - (qstephens) - (5)
             If that is the case - (orion) - (4)
                 now this sucks - (lincoln) - (3)
                     Your employer has a help desk/tech support area? - (Meerkat)
                     Settle down - (orion) - (1)
                         He doesn't have XP Home. - (inthane-chan)

Please do not spit too loud, thank you.
96 ms