I never had to do this but since you're looking for suggestions....It would appear to me you want to give the users the most restrictive access and still be able to use the burner.
I would start by checking the "restricted user" first and if that doesn't work, the "standard user".
If neither one works, which would surprise me, make them members of the local administrator group; that should allow them to do anything on the machine...
tgj