Policy

Prioritize all digitally signed drivers equally during the driver ranking and selection process

This policy setting allows you to determine how drivers signed by a Microsoft Windows Publisher certificate are ranked with drivers signed by other valid Authenticode signatures during the driver selection and installation process. Regardless of this policy setting, a signed driver is still preferred over a driver that is not signed at all. If you enable or do not configure this policy setting, drivers that are signed by a Microsoft Windows Publisher certificate and drivers that are signed by other Authenticode certificates are prioritized equally during the driver selection process. Selection is based on other criteria, such as version number or when the driver was created. If you disable this policy setting, drivers that are signed by a Microsoft Windows Publisher certificate are selected for installation over drivers that are signed by other Authenticode certificates.

Policy
Pack Microsoft Windows
Category System / Device Installation
Policy ID bb25dbd4bcc0
Internal name DeviceInstall_AllSigningEqual

Registry

Copy registry mappings

HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Settings\AllSigningEqual (enabled) = 1
HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Settings\AllSigningEqual (disabled) = 0

Policy notes

This policy setting allows you to determine how drivers signed by a Microsoft Windows Publisher certificate are ranked with drivers signed by other valid Authenticode signatures during the driver selection and installation process. Regardless of this policy setting, a signed driver is still preferred over a driver that is not signed at all. If you enable or do not configure this policy setting, drivers that are signed by a Microsoft Windows Publisher certificate and drivers that are signed by other Authenticode certificates are prioritized equally during the driver selection process. Selection is based on other criteria, such as version number or when the driver was created. If you disable this policy setting, drivers that are signed by a Microsoft Windows Publisher certificate are selected for installation over drivers that are signed by other Authenticode certificates.

Related policies

Allow remote access to the Plug and Play interfaceConfigure device installation time-outDo not send a Windows error report when a generic driver is installed on a devicePrevent automatic download of applications associated with device metadataPrevent creation of a system restore point during device activity that would normally prompt creation of a restore pointPrevent Windows from sending an error report when a device driver requests additional software during installationSpecify search order for device driver source locations