That has nothing to do with DEVCON. It is an integrated security feature of the OS itself. You can't enable or disable drivers without having the proper authorization, which by default is Administrator. Maybe a Power User may be allowed to do that too, but I'm not sure. If you want to change what type of user can do what, you will have to get the Resource Kit of your OS and using the Policy Editor change the according settings for that specific computer or the specific Domain account used to log in on a computer. It may be however that disabling a driver is not something you can control as policy.
Yes, we can use DEVCON to control whole of PC's devices, and it is easy, but, you must have administrator's permission account to do this handles. if you are just a simple user by the PC, control function items would be fail. example, disable or enable device, install, remove.....this type of use just can view some information from PC only using DEVCON.
The Power Users group primarily provides backward compatibility for running non-certified applications. The default permissions that are allotted to this group allow this group's members to modify computerwide settings. If non-certified applications must be supported, then end users will need to be part of the Power Users group.
Members of the Power Users group have more permissions than members of the Users group and fewer than members of the Administrators group. Power Users can perform any operating system task except tasks reserved for the Administrators group. The default Windows 2000 and Windows XP Professional security settings for Power Users are very similar to the default security settings for Users in Windows NT 4.0. Any program that a user can run in Windows NT 4.0, a Power User can run in Windows 2000 or Windows XP Professional.
Power Users can:
Run legacy applications, in addition to Windows 2000 or Windows XP Professional certified applications.
Install programs that do not modify operating system files or install system services.
Customize systemwide resources including printers, date, time, power options, and other Control Panel resources.
Create and manage local user accounts and groups.
Stop and start system services which are not started by default.
Power Users do not have permission to add themselves to the Administrators group. Power Users do not have access to the data of other users on an NTFS volume, unless those users grant them permission.http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/windows_security_default_settings.mspx?mfr=true
Thanks all, but I can't disable keyboard device. DEVCON prompts me disable failed, and as enable keyboard device, it told me, enable OK. why ? can tell, I use DEVCON status to get the Device ID, so the ID should be correct.
and I found DEVCON disable my floppy disk device is OK.