I have a requirement to disable driver signature checking in a Windows 7 Ent x64 environment. I have used BCDEDIT on a single client to disable integrity checking and confirm that this works to allow installation of an unsigned driver, however I need to make a change at domain level using GPO so that all clients are able to install unsigned drivers. I have configured a GPO on the DC (2008 R2) with the 'code signing for device drivers' set to 'enabled' and 'ignore'. The policy is picked up by the client/user I am using a test but it still does not allow un-prompted installation of an unsigned driver. (it pops up with the 'warn' box and prompts to cancel or continue) I'm not sure if there is something obvious I am missing that would prevent this from working?

You cant permanently disable the use of unsigned drivers in the 64-bit version of Windows Server 2008/7 at least, not using any Microsoft-recognized technique. Its possible to disable the use of unsigned drivers in the 32-bit version using Gpo as you mentioned.Marco Adamo

You cant permanently disable the use of unsigned drivers in the 64-bit version of Windows Server 2008/7 at least, not using any Microsoft-recognized technique. Its possible to disable the use of unsigned drivers in the 32-bit version using Gpo as you mentioned. Marco Adamo Do you happen to have a link to a MS KB or similar that shows this? As I will more than likely have to demostrate this fact to those requesting this functionality. Thanks.

http://msdn.microsoft.com/en-us/library/windows/hardware/ff548231(v=vs.85).aspxMarco Adamo