USB, Self-Signd .CAT created ok, BUT attach device still req. ADMIN (USB Smartnav by Natural Point)
Device = USB Smartnav by Natural Point
Only Drivers included on DVD (for XP install) were:
npusbio.SYS
npusbio.INF
Q1. The vendor said the.sys was signed, is this possible as I thought only a CAT files can be signed?
Anyway, thenpusbio.INF did have a reference to a npusbio.CAT file, but there was no CAT files anywhere on Install DVD, even after extracting it or doing a manual complete install.
So I followed :
1.) "Guide to signing unsigned drivers" and all went through ok creating a .CAT and .CER as per the GUIDE
2.) Tried packaging just drivers using Difx within Installshield/Adminstudio, On install it kept rolling back, so skipped this and used MANUAL step 3 below instead.
3.) Manually ran DPINST.EXE /S /LM /PATH "C:\[driver dir]" - This worked ok and seemed to install the driver fine.
(NOTE: If I installed the .CER file first I did NOT need to use the /LM switch.)
4.) Logged in as a STANDARD user (no admin rights), plug in the USB device, and it asked for ADMIN LOGIN to continue driver install, only if I enter admin accounts will it copy and install the drivers correctly.
BUT if I am LOGGED in as an ADMIN, then attach the USB device the driver installs OK no popup boxes etc.. (as long as I first installed the .CER Certificate file)
PROBLEM - On our company network we cannot allow local admin rights for standard users, and we cannot afford to visit each person that requires this USB driver/device, log in as a ADMIN and install the drivers. Our networks GPO (group policy) is heavily secure and cannot make changes to allow unsigned drivers or certs to install, so even though on my test machine I manually installed the CERT file this would not be allowed on our network.
Q2. Is there a way around this?
I guess the only solution I can see is to get the VENDOR to create a properly signed .CAT file, though not sure if I would still get the same issue.
The other issue I have is that the CER file will not install to any of my desktops in our Live environment, I am guessing its a GPO or permission reason though.
I'd appreciate any help, thanks..
Only Drivers included on DVD (for XP install) were:
Q1. The vendor said the
Anyway, the
So I followed :
1.) "Guide to signing unsigned drivers" and all went through ok creating a .CAT and .CER as per the GUIDE
2.) Tried packaging just drivers using Difx within Installshield/Adminstudio, On install it kept rolling back, so skipped this and used MANUAL step 3 below instead.
3.) Manually ran DPINST.EXE /S /LM /PATH "C:\[driver dir]" - This worked ok and seemed to install the driver fine.
4.) Logged in as a STANDARD user (no admin rights), plug in the USB device, and it asked for ADMIN LOGIN to continue driver install, only if I enter admin accounts will it copy and install the drivers correctly.
Q2. Is there a way around this?
I guess the only solution I can see is to get the VENDOR to create a properly signed .CAT file, though not sure if I would still get the same issue.
The other issue I have is that the CER file will not install to any of my desktops in our Live environment, I am guessing its a GPO or permission reason though.
I'd appreciate any help, thanks..
0 Comments
[ + ] Show comments
Answers (2)
Please log in to answer
Posted by:
anonymous_9363
13 years ago
Did you log the failed install? A verbose log will contain details about the failure, which will almost certainly be due to the MSI not containing the full path to the files you're trying to install or execute.
Posted by:
eilz
13 years ago
ORIGINAL: VBScab
Did you log the failed install? A verbose log will contain details about the failure, which will almost certainly be due to the MSI not containing the full path to the files you're trying to install or execute.
I did look at the verbose log, but nothing really indicated the exact error, I am for the moment trying to skip step 2 until I can find a non packaged way to get these drivers installed if a NON-admin user attaches the device to their PC and without getting any prompts. Once I am happy with this I will go back to the package creation (step2). Thanks for quick reply.
Rating comments in this legacy AppDeploy message board thread won't reorder them,so that the conversation will remain readable.