Manage Print Driver signature validation: registry value ValidationLevelComputerHKLM\Software\Policies\Microsoft\Windows NT\Printers\Driver
- Policy ID
- ConfigureDriverValidationLevel
- Scope
- Computer Configuration
- Supported on
- At least Windows Server 2012, Windows 8 or Windows RT
- Source
- Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
- Category
- Printers
Registry
ValidationLevel
REG_DWORDComputer- Enabled value
- Depends on the option value
- Element
- Select the driver signature mechanism for this computer:
| Item | Stored value |
|---|---|
| Require inbox signed drivers | 0 |
| Allow inbox and Print Drivers Trusted Store signed drivers | 1 |
| Allow inbox, Print Drivers Trusted Store, and WHQL signed drivers | 2 |
| Allow inbox, Print Drivers Trusted Store, WHQL, and Trusted Publisher Store signed drivers | 3 |
| Allow all validly signed drivers | 4 |
Apply with .reg · CMD · PowerShell
.reg
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers\Driver] ; Options (use only one) ; Require inbox signed drivers "ValidationLevel"=dword:00000000 ; Allow inbox and Print Drivers Trusted Store signed drivers "ValidationLevel"=dword:00000001 ; Allow inbox, Print Drivers Trusted Store, and WHQL signed drivers "ValidationLevel"=dword:00000002 ; Allow inbox, Print Drivers Trusted Store, WHQL, and Trusted Publisher Store signed drivers "ValidationLevel"=dword:00000003 ; Allow all validly signed drivers "ValidationLevel"=dword:00000004
CMD
:: Options (use only one) :: Require inbox signed drivers reg add "HKLM\Software\Policies\Microsoft\Windows NT\Printers\Driver" /v "ValidationLevel" /t REG_DWORD /d 0 /f :: Allow inbox and Print Drivers Trusted Store signed drivers reg add "HKLM\Software\Policies\Microsoft\Windows NT\Printers\Driver" /v "ValidationLevel" /t REG_DWORD /d 1 /f :: Allow inbox, Print Drivers Trusted Store, and WHQL signed drivers reg add "HKLM\Software\Policies\Microsoft\Windows NT\Printers\Driver" /v "ValidationLevel" /t REG_DWORD /d 2 /f :: Allow inbox, Print Drivers Trusted Store, WHQL, and Trusted Publisher Store signed drivers reg add "HKLM\Software\Policies\Microsoft\Windows NT\Printers\Driver" /v "ValidationLevel" /t REG_DWORD /d 3 /f :: Allow all validly signed drivers reg add "HKLM\Software\Policies\Microsoft\Windows NT\Printers\Driver" /v "ValidationLevel" /t REG_DWORD /d 4 /f
PowerShell
# Common: create the key New-Item -Path 'HKLM:\Software\Policies\Microsoft\Windows NT\Printers\Driver' -Force | Out-Null # Options (use only one) # Require inbox signed drivers New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows NT\Printers\Driver' -Name 'ValidationLevel' -PropertyType DWord -Value 0 -Force | Out-Null # Allow inbox and Print Drivers Trusted Store signed drivers New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows NT\Printers\Driver' -Name 'ValidationLevel' -PropertyType DWord -Value 1 -Force | Out-Null # Allow inbox, Print Drivers Trusted Store, and WHQL signed drivers New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows NT\Printers\Driver' -Name 'ValidationLevel' -PropertyType DWord -Value 2 -Force | Out-Null # Allow inbox, Print Drivers Trusted Store, WHQL, and Trusted Publisher Store signed drivers New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows NT\Printers\Driver' -Name 'ValidationLevel' -PropertyType DWord -Value 3 -Force | Out-Null # Allow all validly signed drivers New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows NT\Printers\Driver' -Name 'ValidationLevel' -PropertyType DWord -Value 4 -Force | Out-Null