Could one of you explain to me why we need a exe which fixes this at boot time?
Can't we create the registry settings at build time?
It was not possible to come up with a configuration in the registry that prevented the functionality, it's by design, MS even had to post that.
Believe me, I tried, for sometime to produce a solution. I scrubbed the net and thought on it again and again, but alas, I too came to the conclusion that if this was to work for everyone, all the time, we needed some help to suppress the check on driversigning policy or rather the correction of it.
This is not controlled by rrsaenh.dll but by setup APIs early on in the startup.
In case it helps anyone though, here the main entry for rsaenh.dll:
I found no exe or prog to do the job, I tried all the ones you're thinking of. I was at my wits end so I posted here and didn't have to wait long.. Peter found a slick proof of concept program that was never compiled but looked very promising
. First Peter took the entries the program suggested modifying and added the local values from his system to a script for testing, but of course that won't work for many people. Then some more attempts and failures at pre build configurations.. finally we both decided to compile the code. Myself in C, and Peter converted the data to Delphi with a few small changes. Early tests of the Exe did not seem to work because we didn't launch it early enough in the startup sequence. Above you'll see I finally, and this I think is no stroke of genius, decided to push it up in the startup order. On the test following that change, the new exe worked!
I waited about five minutes because I thought I was dreaming, then did a little dance.
And that's the story.