Windows 10: Different methods to disable driver signature check and their realations

For Windows 10


I am examining different methods to monitor the disabling of "driver signature check". From a search online I found 3 main method:

1. from administrator cmd run:

bcdedit.exe -set loadoptions DDISABLE_INTEGRITY_CHECKS
bcdedit.exe -set TESTSIGNING ON


actually, bcdedit.exe -set loadoptions DISABLE_INTEGRITY_CHECKS didn't show an error (?)

2. from GPedit tool:

User Configuration -> Administrative Templates -> System -> Driver Installation -> Code signing for drivers
Click on "Disabled", then on "OK".


3. set registry key: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows NT\Driver Signing

with BehaviorOnFailedVerify key value to "0".


Actually, this key is not present on my machine (Windows 10)

-----------------------


I am trying to find the relations between them, and find a way to monitor the disabling of this checking. When I run method (1), there is no effect on method (2) and vice versa. Also, when either method (1) or (2) are called the registry key in method (3) is not created.


Usually, Windows manages configurations via registry keys, but in this case I couldn't find any relevant key created/changed when the methods are called, is there such a registry key?

From a monitoring point of view, how can I know that the driver signature check was disabled?

:)

 

disable driver signature enforcement

Hi Barbara,

To resolve this issue, let's use the command prompt to disable driver signature enforcement permanently on your computer. To disable, follow the steps below:

• Click the Start button.
• On the search bar, type Command Prompt and then right-click
  Command Prompt in the results.
• Select Run as Administrator, and then select Yes.
• On the command prompt, enter bcdedit.exe /set nointegritychecks on and press
  Enter.
• Restart your computer.

Note: Doing this step will disable driver signature enforcement permanently and will make your computer vulnerable to driver issues.

Keep us updated with the results.

 

How to disable driver signature enforcement permenently.

Hi Ashan,

Driver Signature Enforcement is one of the security features that we make to make sure that only signed drivers can load on your system. Take note that disabling driver signature enforcement will install drivers that weren’t officially signed. To disable
driver signature enforcement permanently, you can follow the steps below:

• Open an elevated Command Prompt. To do this, press the Windows
  key, type Command Prompt, press right click on the
  Command Prompt and select Run
  as administrator.
• Type or paste the following:
  
  bcdedit.exe /set nointegritychecks on
  
• Restart your computer.

If you want to enable the driver signature enforcement, just follow the steps above and type or paste the following:

bcdedit.exe /set nointegritychecks off

Should you need further assistance, don't hesitate to get back to us.

 

Disabling driver signature enforcement

I tried give method and command prompt method too but both are get failed to disable driver signature, But I only facing this problem in This W10 Creates update , This method was In success full in W10 anniversary update

Please help me.. If you know how to disable driver signature in Creates update