Mystifying group policy error

  • Thread starter Thread starter Ken Pierce
  • Start date Start date
K

Ken Pierce

I'm trying to install a driver for a new ethernet card. I
get "This installation is forbidden by system policy,"
etc.

I'm logged on as Administrator, which is in the
Administrators group. I've gone into the group policy
editor and made sure that all options were set to "Not
configured." Yet I still get this message, even when
logged in as Admistrator.

This particular computer has always been standalone and I
don't know why we would ever have configured it with
security restrictions. Any ideas on what is going on here?
 
Hi Ken.

Try going into Local Security Policy - secpol.msc. Then navigate to security
settings/local policies/security options. Then look for I believe the next to last
option about unsigned driver installation and set it to "warn but allow installation"
and save the setting. That might help out. --- Steve
 
Thanks for the suggestion. Unfortunately it was already
set that way. I tried changing it to "Silently succeed"
and got the same behavior. So I changed it back.

Any other ideas?

KP
-----Original Message-----
Hi Ken.

Try going into Local Security Policy - secpol.msc. Then navigate to security
settings/local policies/security options. Then look for I believe the next to last
option about unsigned driver installation and set it
Click to expand...
to "warn but allow installation"
 
Please note that the ethernet card in question is a
Broadcom NetXtreme Enternet Controller.
 
Try doing the same for the security option under it for non driver installation
behavior and look in user rights to make sure that administrators group has the right
to load and unload device drivers. Sometimes looking in Event Viewer can also help.
If none of that helps I would try using Security Configuration and Analysis mmc
snapin to run an analysis against the setup security.inf template to see what it
reports and maybe change any differences found in user rights and security options
back to default or look at the link below on resetting security to default defined
levels using secedit. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;EN-US;313222 --- you can use
/areas to configure certain areas only.
http://www.lokbox.net/SecureXP/secAnalysis.asp
 
Back
Top