WebJunction - Gates Foundation Granted Computers

Applicability

The information in this document applies to standalone Gates Library Computers running Windows 2000.

Why Do This?

Patrons might bring devices into the library that connect to the computer’s USB port, such as digital cameras or flash drives. If the device needs to be assigned a drive letter to work, and the CD/DVD drive is enabled on the Gates Library Computer, the device will not be able to receive the needed drive letter.

To enable patrons to be able to use USB devices with a Gates Library Computer, library staff can disable the CD/DVD drive using the Centurion Guard key. However, disabling the CD/DVD drive will not work for patrons who want to use a CD burner and a USB device at the same time, or for libraries where the Centurion Guard key is not readily available to all staff.

Before You Begin

To perform these instructions, you need the Centurion Guard key and the exec password. To verify that the procedure worked correctly, you will need a device (such as a digital camera) that plugs into a USB port and is assigned a drive letter on the computer.

NOTE: These instructions need to be performed each time the Profile Restrictions component of the Public Access Computer Configuration Tool is removed and reinstalled.

Instructions

Follow this procedure to set up a new system policy template that allows the use of drive G or G-Z. After you complete these steps, a user can plug a USB-enabled device into the USB port of a Gates Library Computer and the device will be assigned the drive letter G or higher.

NOTE: Before unplugging a USB device, single left-click, first on the icon next to the clock in the lower right corner of the screen and then on Stop USB Mass Storage Device. Click OK. Then unplug the device. Double-clicking on the icon will result in an error message.

1. Shut down the computer, and when it is fully shut down, unlock Centurion Guard.
2. Start the computer, and log on as exec.
3. Open a browser window and download the driveadm.zip file from WebJunction. The File Download dialog box appears.
4. Select Save this program to disk, and click OK. The Save As dialog box appears.
5. Click the downward-pointing arrow to the right of the Save Inlist, and select Desktop.
6. Click Save. The file is downloaded.
7. Quit all open programs.
8. Double-click the driveadm.zip file on the desktop. Choose to Exctract All.
9. Open the driveadm folder on the desktop
10. Double-click the driveadm.exe file in the folder. The WinZip Self-Extractor window opens.
11. Click Unzip. The contents are unzipped to the selected location.
12. Click OK.
13. Click Close.
14. Click Start > Programs > Administrative Tools > Policy Editor. The System Policy Editor opens.
15. Click Options, and select Policy Template. The Policy Template Options window opens.

Screen Shot

14. Select C:\WINNT\inf\os.adm, and click Remove. The os.adm file is removed from the Policy Template Options window.
15. Click Add. The Add Policy window opens.
16. Browse to C:\WINNTR\INF.
17. Select OSv2.adm, and click OK.
18. Click Open. The OSv2.adm file is copied to the Policy Template Options list.
19. Click File, and select C:\\policy\\ntconfig.pol. The ntconfig.pol file opens in the System Policy Template window, and the users are displayed.
20. Double-click the user account you wish change (such as all). The Properties window for this user opens.
21. Click the plus signs to open Operating System and Windows Explorer. The check boxes associated with Windows Explorer are displayed.
22. Select the phrase Hide these specified drives in My Computer. Settings for Hide these specified drives in My Computer appear in the box below.

Screen Shot

23. Click the downward-pointing arrow next to the list box, if you wish to allow just one added device, select Restrict all but A, E, F, and G. This user will be allowed to use drives A, E, F, and G. If you wish to allow multiple USB devices at a time, select Hide C and D Only.

Screen Shot

24. Click OK.
25. Repeat Steps 20–24 for all users you want to be able to access drive G.
26. Click File, and select Save. The new policy file updates are saved.
27. Close System Policy Editor.
28. Log on as the public user you enabled to use drive G, and plug a device into the USB port.
29. Double-click My Computer. The My Computer window opens.
30. Verify that you can see the drive that represents the USB device.
31. Verify that the device is available on drive G.
32. Shut down the computer.
33. When the computer is fully shut down, turn the Centurion Guard key to the DVD Drive Unlocked–Hard Drive Locked position.
34. Remove the Centurion Guard key, and place it in its secure location.