I had the same situation. I wanted school students to be able to remove their USB drives without giving them rights. Here is what I did:
- Create a shortcut named ?Safely Remove Hardware? with the target location of %windir%System32RUNDLL32.EXE shell32.dll,Control_RunDLL hotplug.dll
- Place the shortcut on your start menu (network or local)
- Open your User Policy and go to Administrative Templates/Control Panel. Change the setting ?Prohibit access to the Control Panel? to ?Not configured?.
- Change the ?Show only specified Control Panel Applets? to ?Enable? then click the Show button, click the add button and type in sysdm.cpl.
Step #4 only allows them to run the applet not get into the control panel itself.
Hope this helps, Toby