Solved

How to disable Digital Driver signing in Windows 7 32Bit for mass deployment

Posted on 2011-09-06
4
449 Views
Last Modified: 2012-05-12
Hello all.

I have run into a jam. I need to upgrade the Wireless Network drivers of 220 tablet PCs running windows 7 32-bit. The drivers from the manufacturer of the network cards (atheros) are unsigned, so I need to disabe digital driver signing in a way that is least disruptive to the users. Another problem with these drivers is that they are basically a bare driver with no EXE attached. I have that sorted out using Devcon to make this work.

I have seen some talk of using BCDedit and turning off driver signing, but as I understand it, that requires a reboot. Is there any other way of doing this?

Thanks
0
Comment
Question by:VillaMaria
  • 2
  • 2
4 Comments
 
LVL 66

Expert Comment

by:johnb6767
ID: 36489905
There is a user policy>Admin Templates>System>Driver Installation>Code signing for Device Drivers (never used it so cant validate it's behavior)
http://technet.microsoft.com/en-us/library/cc975910.aspx

Personally, I would only leave enabled until you have your deployment completed (assuming it works)....

"Determines how the system responds when a user tries to install device driver files that are not digitally signed.

This setting establishes the least secure response permitted on the systems of users in the group. Users can use System in Control Panel to select a more secure setting, but when this setting is enabled, the system does not implement any setting less secure than the one the setting established.

When you enable this setting, use the drop-down box to specify the desired response.

--   "Ignore" directs the system to proceed with the installation even if it includes unsigned files.

--   "Warn" notifies the user that files are not digitally signed and lets the user decide whether to stop or to proceed with the installation and whether to permit unsigned files to be installed. "Warn" is the default.

--   "Block" directs the system to refuse to install unsigned files. As a result, the installation stops, and none of the files in the driver package are installed.

To change driver file security without specifying a setting, use System in Control Panel. Right-click My Computer, click Properties, click the Hardware tab, and then click the Driver Signing button."
0
 

Author Comment

by:VillaMaria
ID: 36490068
Everything that I have read about that group policy setting has said that it does not work under Windows 7, or is that just Windows 64? The description in group policy also lists its requirements as Server 2003, XP, and 2000 operating systems only.
0
 
LVL 66

Accepted Solution

by:
johnb6767 earned 500 total points
ID: 36493389
Youre right... I missed that on my spreadsheet.... Might need to use the bcdedit method, and do that maybe a few days in advanced of rolling out the driver.....

maybe once the change is made, set a flag on the machine, and only target THOSE with the driver....
0
 

Author Closing Comment

by:VillaMaria
ID: 36495495
This is not the answer I was hoping for since it is the answer I had already come up with, but at least it is reassuring that it is the right answer, even if it will be a PITA to implement.
0

Featured Post

Ransomware-A Revenue Bonanza for Service Providers

Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat.  The purpose of this eBook is to educate the reader about ransomware attacks.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

When you start your Windows 10 PC and got an "Operating system not found" error or just saw  "Auto repair for startup" or a blinking cursor with black screen. A loop for Auto repair will start but fix nothing.  You will be panic as there are no back…
You may have a outside contractor who comes in once a week or seasonal to do some work in your office but you only want to give him access to the programs and files he needs and keep privet all other documents and programs, can you do this on a loca…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
This Micro Tutorial will give you a introduction in two parts how to utilize Windows Live Movie Maker to its maximum capability. This will be demonstrated using Windows Live Movie Maker on Windows 7 operating system.

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now