geek-y-guy wrote:
Hi All: I have an SBS2003 domain with a number of xppro sp2 clients.
All the computers are members of the domain, and I've set up domain
users for each computer.

I have a USB scanner installed on one computer, and when a user logs
on to the local machine, they can access the scanner, but if they log
on using the domain account, they get an error when the scanner
application tries to load the (presumably) USB drivers for the
scanner.
It seems like a local security policy issue, but I can't figure out
what privileges the domain user needs to have the same access the
local account has?

If the scanner is installed already, this is unlikely to be a driver issue.
More likely, the software you're using is expecting the user to have
administrative rights on the workstation in order to run the app.

First, I'd contact the software developer and ask for a workaround which
does *not* involve granting domain users admin rights - this is sloppy code,
and they need to fix it.

If you get nowhere with them, try downloading Process Monitor from Microsoft
(a cool Sysinternals tool) that will help you find out what areas of the
file system & registry the app expects to write to, so you can manually
edit/correct it.