Managing Driver Installation Behavior
Policy settings for controlling driver installation behavior, including driver signing and driver search, are found under Computer Configuration\Policies\Administrative Templates\System \Driver Installation or User Configuration\Policies\Administrative Templates\System\Driver Installation, or both. However, the only driver installation policy setting that still applies in Windows 7 is the one that can be used to manage the driver installation behavior for standard users, specifically the following machine policy setting:
Computer Configuration\Policies\Administrative Templates\System\Driver Installation \Allow Non-Administrators To Install Drivers For These Device Setup Classes
This policy applies to Windows Vista or later versions and can be used to specify a list of device setup class GUIDs describing device drivers that standard users can install on the system. Enabling this setting allows users to install new drivers for the specified device setup classes. (The drivers must be signed according to Windows Driver Signing Policy or by publishers already in the TrustedPublisher store.) Disabling this policy setting or leaving it Not Configured means that only members of the local Administrators built-in group can install new device drivers on the system.
To configure this policy, follow these steps:
- Using Group Policy Object Editor on a Windows Vista computer, open the Group Policy object (GPO) linked to the organizational unit (OU) where your target users have their computer accounts.
- Navigate to the policy setting and double-click it to open it.
- Enable the policy. Click Show and then click Add.
- Type the GUID for the device setup class for the device type that you want to allow standard users to be able to install on computers targeted by the GPO. For example, to allow users to install imaging devices, such as digital cameras and scanners, type {6bdd1fc6-810f-11d0-bec7-08002be2092f} in the Add Item text box. Continue by adding other GUIDs as needed.
More Info For a list of device setup classes and their GUIDs, see http://msdn2.microsoft.com/en-US/library/ms791134.aspx.
In this tutorial:
- Managing Devices and Services
- Understanding Device Installation and Management
- Device Enhancements in Windows 7
- Display Enhancements in Windows 7
- Understanding Device Installation
- Driver Store and Driver Packaging
- Driver Staging vs Installation
- Driver Staging and Installation Process
- Detailed Installation Process
- Managing Driver Packages
- Using PnPutil.exe
- Using Dism.exe
- Driver Signing
- Driver Ranking
- Installing and Using Devices
- Enhancements to the Device Installation Experience in Windows 7
- Scenario 1: Driver found in Driver Store
- Scenario 2: Driver found on Windows Update
- Scenario 3: Driver in Driver Store, But Better Driver on Windows Update
- Scenario 5: No Driver Can Be Found for the device
- Scenario 6: Vendor -supplied media is available
- Scenario 7: Additional Device Software is Available For Download from vendor
- Configuring Device Installation Settings
- Using the Devices And Printers Folder
- Understanding Device Stage
- Understanding the Device Experience Architecture
- Device Containers
- Device display object
- Device Metadata System
- Managing Device Installation Using Group Policy
- Managing Device Installation Behavior
- Managing Driver Installation Behavior
- Blocking Installation of Removable Devices
- Managing Device Redirection Behavior
- Troubleshooting Device Installation
- Using Windows Error Reporting
- Using the SetupAPI Log File
- Using Driver INF Files
- Using Device Manager Error Codes
- Using Driver Verifier
- Repairing Driver Store Corruption
- Repairing Index File Corruption
- Understanding Power Management
- Power Management Enhancements in Windows 7
- New Power Policies in Windows 7
- Configuring Power Management Settings
- Configuring Power Management Settings Using the Power Options Utility in Control Panel
- Configuring Power Management Settings Using Group Policy
- Configuring Power Management Settings Using the Powercfg Utility
- Understanding Services
- Service Enhancements in Windows 7
- Managing Services
- Managing Services Using Task Manager
- Managing Services Using the Sc.exe Command