Systweak Tweak Library
Tweaks are tricks & hacks for optimizing your system and helps in enhancing & securing your Operating System
 
 
Skip Navigation LinksHome > Software / Applications > Other Programs > Set “Driver Signing” behavior
oftware / applications
Set “Driver Signing” behavior.

This setting controls the options that should appear if Windows is about to install a driver that has not been digitally signed.

Tweak for : Windows XP, Windows 2003, Windows 2000
Driver Signing lets you make sure that installed drivers are compatible with Windows, which means that the driver being installed has been tested by Microsoft and works as expected. This setting controls the options that should appear if Windows is about to install a driver that has not been digitally signed.

For this, go to Start > Run menu, enter “regedit” and navigate to the registry path listed below. If the subkey “\Driver Signing” does not exist, create it as explained below. Then, create DWORD and Binary value with the same name “Policy”. The data value of HKEY_CURRENT_USER path depends upon the value you write in HKEY_LOCAL_MACHINE path.

The below table shows the combination of values you can use in HKEY_CURRENT_USER path when the values in HKEY_LOCAL_MACHINE path is either 0 or 1 or 2.

Local Machine ValueCurrent User Value (Code_Value)
00 or 1 or 2
11 or 2
22


NOTE:
0 – Represents installing driver without any warning.
1 – Displaying a warning and asking user before installing a driver.
2 – Do not allow unsigned drivers.

The changes take effect after a restart or logoff.

Apply registry settings according below given steps of screenshots with related changes.

User gets the prompt to ‘Continue’ or ‘Stop’ while installing unsigned device drivers.

Unsigned device drivers are blocked from installing.

Digitally unsigned device drivers are allowed to install and no prompt is given to user.

First, click the 'Start' button, and select 'Run'. In the resulting dialog box, type "regedit".

Second, go to the [HKEY_CURRENT_USER\Software\Microsoft\] key, right-click and click on "New > Key" to create a new key with the name "Driver Signing".

Third, right-click on the blank area in the right pane and click on "New > DWORD Value" to create a new DWORD value with the name "Policy".

Fourth, right-click on the 'Policy' DWORD value and click on "Modify".

Fifth, enter either of the code values in the text box like "00 - Ignore, 01 - Warn, 02 - Block" and click on 'OK'. It further depends upon the values given on HKEY_LOCAL_MACHINE path.

Sixth, go to the [HKEY_LOCAL_MACHINE\Software\Microsoft\Driver Signing\] key, right-click on the blank area in the right pane and click on "New > Binary Value" to create a new Binary value with the name "Policy".

Seventh, right-click on the 'Policy' Binary value and click on "Modify".

Fifth, enter either of the code values in the text box and click on 'OK'. The data values can be "00 - Ignore, 01 - Warn, 02 - Block".

Change the driver signing behavior.

Category : Software / Applications > Other Programs

Digital signing on the device driver ensures quality and assurance of the product. But you can use this setting to change the default behavior.

 
 
Remove spyware infections automatically / manually | Check for file authenticity
 
Systweak Inc.
© Systweak Inc., 1999-2017 All rights reserved.
Microsoft Gold Certified Partner