Re-enabling prompt for trusting a driver in Windows 7?

Question

I installed some hardware on Windows 7 Pro, and clicked the "Always trust drivers from ..." checkbox before installing. However, now I want to disable this, i.e. I want to be prompted again. I cannot find this information on from searching on google with keywords like "windows 7" driver trust install... ugh. Can someone tell me how to do this?

Solution 1

To be properly installed in Windows 7, a hardware driver must have a Setup Information file (with the extension .inf). This is a text file that contains detailed information about the device to be installed, including the names of its driver files, the locations where they are to be installed, any required registry settings, and version information.

All devices with drivers in the DriverStore folder include Setup Information files in the %SystemRoot%\Inf folder. The basic structure of a Setup Information file is similar to an old-fashioned Windows 3.x–style .ini file. Each piece of setup information appears on its own line under a bracketed section heading. Windows will not allow the driver package to be copied into the driver store unless these sections are present and filled in correctly.

In particular, an .inf file must contain valid [SourceDisksFiles] and [SourceDisksNames] sections. At the time the .inf file is copied into the driver store, Windows creates a folder for the driver files using the name of the .inf file with an eight-character hash appended to it.

You should delete the .ini file - make a backup first.

Source: http://www.webworldarticles.com/e/a/title/Windows-7-installs-drivers-from-trusted-publisher/

More info about signed drivers in Windows 7: http://www.webworldarticles.com/e/a/title/Windows-7-installs-drivers-from-trusted-publisher/

Solution 2

The answer is wrong... the correct way to do this is to run the Certificate Manager and remove the certificate from the Trusted Publishers node.

Open a run box and type

certmgr.msc

Hit OK

It should be in the Trusted Publishers folder.

Comments

[navid]

That could be it! I added the Certificates snap-in for the computer account, and under Trusted Publishers, I found an entry for the device hardware manufacturer. Thanks for the tip! I'll wait until the others get in before I delete the entry -- they might want me to wait until later to mess with this. :) In the meantime, maybe submit your answer so I can mark it when the time comes?

[navid]

Thanks, I'll have to try this on the next PC that comes in.

[Claudiu]

are those supposed to be the same link?

[wget]

This is not enough, according the tests I performed with the OpenVPN TAP driver, I had indeed to remove the drivers from C:\Windows\Inf (aka the Drivers Store) as well. I think is is due to the fact cab files do actually contain driver certificates and removing the certificate from Certificates (Local Computer) –> Trusted Publishers –> Certificates in certmgr.msc like you specified is therefore not enough. This is a must read

[Joerg S]

Found that the inf files have been renamed to oem9.inf and oem10.inf. After removing them I again got the pop-up :)