Driver signing helps ensure that the device drivers you use are compatible with Windows...

Driver signing helps ensure that the device drivers you use are compatible with Windows operating systems and enables you to avoid unauthorized drivers, malware drivers, or drivers that are out of date. In Windows Vista/7 and Server 2008/ Server 2008 R2 unsigned drivers are automatically blocked unless the Administrator has changed the default security. In the 64-bit versions of Windows Server 2008 and Server 2008 R2 unsigned drivers are not allowed at all. However, in Windows XP and Server 2003/Server 2003 R2, driver signing is not configured by default to block unsigned drivers, unless this is set by the system administrator. Because a network is only as safe as its least safe computer, it pays to block unsigned drivers in earlier operating systems. In this project, you set driver signing at the Block level in Windows XP and Server 2003/Server 2003 R2, which prevents an unsigned driver from being installed. You need to use an account with Administrator privileges.

To configure driver signing:

1. In Windows XP, click Start, click Control Panel, click Performance and Maintenance, and click System. In Windows Server 2003, click Start, point to Control Panel, and click System.

2. Click the Hardware tab and click Driver Signing (see Figure 6-19).

3. What options are available for driver signing? How can you make the option that you select apply to all users who log onto the operating system and attempt to install software?

Record your observations.

4. Click Block – Never install unsigned driver software if this is not already selected.

5. Click OK in the Driver Signing Options dialog box.

6. Click OK in the System Properties dialog box.

7. Close any open windows, such as the Performance and Maintenance window.