If you plug in a USB device and you are not a member of the Administrators group, Windows 2000 generates the error message: the user is not authorized to install a new device. This issue, among others, is why many organizations make users, particularly laptop users, members of the administrator group. This is simply not acceptable in many other organizations from a security perspective. Other organizations don't allow it for operational issues - to prevent too twiddling with the operating system - because it results in too many calls to the help desk and installers groups.

Windows 2000 has a method to allow members of normal user groups or power users to plug in USB devices and install device drivers:

• Logon with administrative rights.
• Double-click on Administrative Tools in Control Panel.
• Double-click the Local Security Policy object.
• Double-click the User Rights Assignment.
• Select Load and unload device drivers from the list. By default, only the Administrators group has this right.
• Double-click the entry.
• Click the Add button.
• Select one or more users (or an appropriate group, such as Power Users) and add those accounts to the list to grant this right.
• Reboot to make effective.

A must for support and installations personnel as well as technical savvy users. 1800 pages with a wealth of information on the CD.

After the Resource Kits, the Admin Companions are next most useful books from Microsoft.

Having this book right next to your machine gets you background data on key W2K features, and detailed step-by-step instructions for W2K protection and system management. It contains informative illustrations, tables, tips and techniques for W2K configuration. The CD includes all example projects from the book, code for managing the Windows 2000 Directory, and command line scripts that can be adapted by readers for their own use. 744 pages Book + CD-ROM edition (July 27, 2000)