Re: Security warning

Hi Konstantin
thank you for your reply, I don't find reg entries in your message even in
XP Pro.
I find this path
HKCU\Software\Microsoft\InternetExplorer\Download\, "checkExeSignatures" set
to YES, I changed to NO, and I added a key "RunInvalidSignatures" set to
yes.
The Security Warning still appears.
I'm starting a new project, so I'll do a new image from scratch using same
drivers. If this warning is still there I'll open a new question.
Thanks Raffaele

"KM" <konstmor@xxxxxxxxxxxxxxxx> ha scritto nel messaggio
news:%23YNWRZaDHHA.4928@xxxxxxxxxxxxxxxxxxxxxxx
Raffaele,

I'd say that you fixed that the right way on an embedded system where you
control what Exe's are to be launched.
You could also fix it by modifying the following reg.entries directly:
[HKCU\Software\Policies\Microsoft\Internet
Explorer\Download],"RunInvalidSignatures"
[HKCU\Software\Policies\Microsoft\Internet
Explorer\Download],"CheckExeSignatures"

If you want to know why you're seeing the warning you probably want first
to debug what file [exe] is the "wrong" one. (just remove all the agent
apps from the Run key and launch them at run time manually to see which
one shows the warning)


--
=========
Regards,
KM


"crus" <crus@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:e5mr4QJDHHA.3660@xxxxxxxxxxxxxxxxxxxxxxx
I've got a new SP2 image, everything is working but during start-up
appear some
-Security Warning Dialog boxes - saying that:
"The publisher could not be verified. ......"
Then I press the run button for all messages and than I have the full
system OK.
This should means that files are not digitally signed.
After that I can install applications, even old ones, but this warning
doesn't appears any more, until next startup.
Files that are indicated as digitally unsigned get executed at start up
and are listed in the registry key
HKLM\Microsoft\Windows\CurrentVersion\Run
they are tray applications loaded by driver components as
hwincal.exe, (touch) igfxtray.exe,( intel video driver) hkcmd.exe,
igfxpers.exe

To check this behavior I started the GroupPolicy Editor ( gpedit.msc)
where I find everything undefined, and set the Attachment Manager
"inclusion list for low files types" to disable warning for ALL .exe
files. With this setting the warning box is not shown, but this is not
the way to understand what is wrong.

I looked in FBA log and found RegSetKeySecurity Failed Error: 0x6
that seems someway related.
I hope that someone can give help to understand what's happening.
Raffaele






.