Windows 2008



By default, membership in the Administrators group, or equivalent, is the minimum required to install a device driver package in the driver store.

The installation of Windows 2008 server and its service packs include a library of device drivers. A standard user on the computer can install a device without needing elevated user permissions if a compatible device driver can be found from the DriverStore.

OEM drivers are not included in the base Windows 2008 and its service packs.

A standard user can install an OEM driver package only if the following conditions are met:

·         The device driver package is signed with a valid digital certificate.

·         The device setup class for the driver is in the computer policy Allow limited users to install drivers for these device classes.

There is no device driver package in DriverStore for this unknown device.

Stage a Device Driver in the Driver Store

Download the driver from ASUS site and expand it to C:\ drive.

C:\>pnputil -a c:\WINVISTA/asacpi.inf

Microsoft PnP Utility

Processing inf : AsAcpi.inf

Driver package added successfully.

Published name : oem2.inf

C:\>pnputil –e

Published name : oem2.inf

Driver package provider : ATK

Class : System devices

Driver version and date : 10/19/2006 1043.4.0.0

Signer name : microsoft windows hardware compatibility publisher


You will find that the drivestore has a new folder as shown:

C:\>dir %systemroot%\system32\driver\asacpi.sys

The system cannot find the file specified.

Because the device driver has not been installed, it will not be in %systemroot%\system32\drivers folder.

This device driver is signed by Microsoft Windows Hardware Compatibility Publisher. I will log on the system as a standard user and install the device driver.



Logon as Administrator

Open the .inf setup file and copy the ClassGUID


Computer Configuration, Administrative Templates, System, and then Driver Installation

Allow non-administrators users to install drivers for these device classes –Enable

Add GUID to the list

Logoff Administrator and logon as standard user: Rob Robinson

Logoff Rob Robinson and Logon as Administrator

From devmgmt.msc console, you will find the driver is installed in c:\Windows\System32\Drivers folder.

If the driver package is not signed by Microsoft, or is signed by a certificate that is not currently in the Trusted Publishers certificate store, the Windows Security dialog appears asking you to confirm whether the driver should be installed. Even though you publish the unsigned package into DriverStore, a standard user can still not install it.

To configure Windows to Search Additional Folders for Device Drivers

When a new device is detected, Windows checks the driver store to see if an appropriate driver package is staged there. If not, it checks several locations to find a driver package to place in the driver store.


HKEY_LOCAL_MACHINE/Software/Microsoft/Windows/Current Version


Add additional folder paths to the setting, separating each folder path with a semi-colon. Ensure that %systemroot%\inf is one of the folders included in the value.

When I run  PenTablet_511-1.exe, it installs the files under c:\Program Files (x86)\Tablet folder. I could add the C:\Program Files (x86)\Tablet to DevicePath parameter in registry. Or, I could stage the driver files in the driverstore as shown below:

pnputil -a "c:\Program Files (x86)\Tablet"/wacmoumonitor.inf

Microsoft PnP Utility

Processing inf : wacmoumonitor.inf

Driver package added successfully.

Published name : oem3.inf

Pnputil –e

Published name : oem3.inf

Driver package provider : Wacom Technology

Class : Mice and other pointing devices

Driver version and date : 10/06/2008 1.00.0003.3

Signer name : microsoft windows hardware compatibility publisher



How to Add OEM Plug and Play Drivers to Windows XP

Copy OEM drivers locally, e.g. C:\Drivers\Nic


Copy OEM drivers to a server, e.g. \\ServerName\Drivers\Nic (where Drivers is a shared folder)


HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\DevicePath: REG_EXPAND_SZ:%SystemRoot%\Inf

For example,

DevicePath: REG_EXPAND_SZ:%SystemRoot%\Inf;%SystemRoot%\Drivers\Nic


DevicePath: REG_EXPAND_SZ:%SystemRoot%\Inf;\\ServerName\ShareName\Drivers\Nic

XP driver location

Setup inf directory: %systemroot%\inf

When I run PenTablet_511-1.exe, it automatically install the drivers in C:\Windows\System32\drivers folder. And all the files are installed in c:\Program Files\Tablet folder. I will edit registry for devicePath to include C:\Program Files\Tablet folder.


If the OEM-supplied drivers for the new device are not digitally signed and a nonadministrator user logs on to the computer after the new hardware is installed, the user cannot complete the installation of the device until an administrator logs on to the computer.

Non-administrative level users require no additional permissions to install or uninstall device drivers if the device is supported hardware with a Plug and Play device ID to driver match. If you provide a properly-signed OEM driver package when using the "New Hardware Found" wizard in the case of either no match or a compatible-rank match, that signed .inf file and its related files are now present on your computer. Because of this, any subsequent "new hardware" of the same type (such as hardware-rank match in the same .inf file and using the same files) is automatically installed by Plug and Play manager without further user interaction required.


runas /u:machine\administrator mmc.exe devmgmt.msc

Rollback driver

Must be in safemode.