Policy

Allow software to run or install even if the signature is invalid

This policy setting allows you to manage whether software, such as ActiveX controls and file downloads, can be installed or run by the user even though the signature is invalid. An invalid signature might indicate that someone has tampered with the file. If you enable this policy setting, users will be prompted to install or run files with an invalid signature. If you disable this policy setting, users cannot run or install files with an invalid signature. If you do not configure this policy, users can choose to run or install files with an invalid signature.

Policy
Pack Microsoft Windows
Category Windows Components / Internet Explorer / Internet Control Panel / Advanced Page
Policy ID 16f66bb7a9ac
Internal name Advanced_InvalidSignatureBlock

Registry

Copy registry mappings

HKLM\Software\Policies\Microsoft\Internet Explorer\Download\RunInvalidSignatures (enabled) = 1
HKLM\Software\Policies\Microsoft\Internet Explorer\Download\RunInvalidSignatures (disabled) = 0
HKCU\Software\Policies\Microsoft\Internet Explorer\Download\RunInvalidSignatures (enabled) = 1
HKCU\Software\Policies\Microsoft\Internet Explorer\Download\RunInvalidSignatures (disabled) = 0

Policy notes

This policy setting allows you to manage whether software, such as ActiveX controls and file downloads, can be installed or run by the user even though the signature is invalid. An invalid signature might indicate that someone has tampered with the file. If you enable this policy setting, users will be prompted to install or run files with an invalid signature. If you disable this policy setting, users cannot run or install files with an invalid signature. If you do not configure this policy, users can choose to run or install files with an invalid signature.

Related policies