FAQ | Allow unsigned driver installation?

[ZeroHour]

Hi

Not sure if this has been asked yet but here goes.

We have a new web cam we want to deploy via Active Directory.

I have a msi package for it but because our users are not admins they can not install the unsigned drivers it requires.

Is there anyway to sign them myself?

Or is there a tool that allows me to bi-pass this requirement of windows?

Cheers

Edited October 6, 2005 by Bâshrat the Sneaky

[Bâshrat the Sneaky]

Temporarily disable the Driver Signing Policy!

[ZeroHour]

The group policy setting dont work.

And we dont want to have to do this to tons of pc's the whole time.

Cheers

[Bâshrat the Sneaky]

Create an MSI setup that executes WatchDriverSigingPolicy.exe (or a self-made AutoIt compiled script). For as long as WatchDriverSigningPolicy.exe is active, you will be able to install any driver!

[ZeroHour]

is that in windows?

Where could I get this?

Cheers for the help man

Your a life saver

[ZeroHour]

Found the file at:

http://unattended.msfn.org/intermediate/drivers/cd.htm

Will post my progress

[ZeroHour]

Sadly it does not appear to work.

I confirmed the registry keys after using the exe but when I manually try to install the drivers I still get the dialog.

Will do some more research but it aint looking good

[Bâshrat the Sneaky]

This .exe has to be running DURING driver installation, that must be the reason why it doesn't work for you!

[ZeroHour]

LOL

I ran the exe

went into windows hardware.

clicked update drivers

linked to drivers

it said they were unsigned and came with the usual confirm screen

I installed them

I used task manager to close the exe.

What is the correct order?

Cheers again for the help

[Bâshrat the Sneaky]

LOL

I ran the exe

went into windows hardware.

clicked update drivers

linked to drivers

it said they were unsigned and came with the usual confirm screen

I installed them

I used task manager to close the exe.

What is the correct order?

Cheers again for the help

Odd... Could you please tell me WHICH WatchDriverSigningPolicy.exe you're using? (Where did you get it?)

[ZeroHour]

the one on unattended.msfn.org

[berrick]

Are they domain users with no local profile? if so you could temp add them to the local admin group via a script then remove after the install, you can also use (the mostly forgotten) RUNAS command from a batch file as part of the install the only problem with RUNAS is that you would need to use a third party app to pass the the admin password to RUNAS

[ZeroHour]

Interesting concept there.

Yeh all users are domain based.

Going to have a look around. Got a bluetooth dongle here and its software bi-passes policies etc when installing on a machine before sp2 (MS would not sign drivers to work on SP1 as it was unsupported).