Digital signature POPUP

[nlsharma]

Hello everybody

I am struggling to turn off this digital signature popup that comes up whenever you are trying to install software that is not Xp logo certified. I need to push something (IBM app) that works fine on xp through sms but i keep getting this digial signature box on some clients how do i make sure the install is totally transparent to the user.

Thanks
Neil

 

[gpalmer711]

Click On Start > Run > gPedit.msc

Under Computer Management > Expand Windows Settings > Then Security Settings > Then Local Policy > Then Security Options. You will then have and option in there named:

Devices:Unsigned Driver Installation Behavior.

Change this to Silently Succeed.

Problem Solved!!

Greg Palmer

----------------------------------------
Any feed back is appreciated.

 

[nlsharma]

ya thanks but i need to do this on all the pc\s over 1000 and I do not have active directory. is there a registry key that i can change through batch file for this setting to be silent

 

[gpalmer711]

Ask and ye shall recieve.

The key is
[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows NT\Driver Signing]

Create a DWORD value named BehaviorOnFailedVerify (caps important)

Change value to 0

Other Values are
0 = Ignore,
1 = Warn,
2 = Block

Greg Palmer

----------------------------------------
Any feed back is appreciated.

 

[nlsharma]

Greg

I tried that; its working but halfway . I created this key under both current user and local machine and set the value to 0 but when i look in the system hardware properties it stays to warn . when i change the value to 2 it switches to block . I change back to 1 it swichtes to warn but even if i change to 0 it keeps it to warn. Am i doing something wrong.

Neil

 

[gpalmer711]

The only thing I can suggest is to set it at 0 and see if you can install a non signed driver. It might just be a quirk in Windows. I don't have the right setup her to be able to test it.

Greg Palmer

----------------------------------------
Any feed back is appreciated.

 

[nlsharma]

hey greg

i just did and it again popped up i will try again with 0 reboot it and then try it but in the mean time is there a email add i can reach u . jst a little faster to communicate

Thanks
Neil

 

[gpalmer711]

Unfortunatly the rules of this forum stop me from posting my email address. I've had my hand slapped for that before.

Try HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Driver Signing

There should be a binary value there already "Policy"

00 = Silent
01 = Warn
02 = Block

I have just tested and it seamed to work

Greg Palmer

----------------------------------------
Any feed back is appreciated.