WIndows 7 default drivers not certified for some accounts
Hi All, I am deploying Win7 Enterprise from an install source rather than an image and have found that for domain users when I try to add a local LPT1 printer the default drivers that come with the OS are fine, however when I try to perform the same action with the administrator account the same drivers appear as unsigned and are unusable with the attempted install generating and error (0x00000057). I've tried exporting the certificate store from a user that can see signed drivers and importing it into an account that can't but this does not fix the issue. Any help would be great as this doesn't seem to be documented anywhere and it's driving me mad!! S
September 26th, 2010 2:40pm

Please download the printer driver from the official website of your manufacturer and install it. Check if this solve your problem or not. This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Free Windows Admin Tool Kit Click here and download it now
September 26th, 2010 3:00pm

It may not actually be that the domain users are installing the drivers successfully - if UAC is enabled, then any changes they make are isolated from the main system OS, whereas administrators have the ability to make changes directly to the system, and this is potentially where the error is coming from. Some extra information would help - is the installation of Windows 7 x86 or x64? Are the drivers definitely WHQL signed, and can you go to the vendor website, grab the latest signed drivers and install them? Also, can you please check the Application logs in the system Event Viewer and see whether you're getting any CAPI2 errors relating to the trusted root certificates - I've seen this issue on various Windows 7 machines recently. If so, this link will help: http://social.technet.microsoft.com/Forums/en-GB/winservergen/thread/2157f78d-7d27-4e38-8aed-176d031d0cbc
September 26th, 2010 5:44pm

Hi Guys, Thanks for the info. Just to elaborate a bit: We are using Win7 x86. The drivers in question are those that come WITH the OS, I've not added any third party drivers. I have done some testing with various accounts and the issue appears to just be with the local administrator account, I've tried printer installs as both local and domain users with and without local admin rights and they all work. The only thing I can think of it the fact that we rename the local administrator account. So I have removed the PC from the domain and renamed the account back to administrator still no joy! If I download the driver for one of the printers Win7 supports (Officejet 6000 E609a) it appears as digitally signed but still returns the same error: ((Printer driver was not installed. Operation could not be completed 0x00000057)) S
Free Windows Admin Tool Kit Click here and download it now
September 27th, 2010 8:12am

Did you check the Application logs in the Event Viewer?
September 27th, 2010 6:23pm

Hi, Do you resolve the problems? If not, I recommend you try JamesBannan’s reply? The application logs could be helpful for troubleshooting. Regards, Miya YaoThis posting is provided "AS IS" with no warranties, and confers no rights. | Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
September 29th, 2010 6:10am

I've been through all the event viewer logs on the machine and can find nothing related to certificate check failures. I have seen another PC that does not have this issue, despite coming from the same install set. So my leaning is now towards group policy, as always any help/ideas is greatly appreciated. S
September 29th, 2010 9:27am

Hi, I talked this over with some of our experts for you, and they mentioned that in order to get root cause they're going to have to review some diagnostic logging from the failing systems. It is unfortunately not an easy thing to troubleshoot. Unfortunately that's not something that we can really do via the forums, so the best thing to do at this point would be to open a support case with us. That will get you a dedicated engineer assigned to the case who can collect the data needed and interface with our debug teams. If you have a support contract with us, contact your TAM to get the case set up. If you don't, then this link details the various options that are available: http://support.microsoft.com/default.aspx?id=fh;en=us;offerprophone David Beach - Microsoft Online Community Support
Free Windows Admin Tool Kit Click here and download it now
October 8th, 2010 1:32pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics