Disabling Digital Signatures

Hi,
Can anyone give me some solid evidence that disabling digital signatures on our 2003 network (for our 10 mac users) would be a good alternative? Right now we have 125 PC's and 10 Mac computers on our network using Active Directory.
I have also seen documentation regarding the issue of enabling digital signatures (if client agrees). Is there evidence or technical manuals at Microsoft's website that they agree that this is a secure alternative?
We have attempted to use AdmitMac to no avail.
-Kevin

This page on Microsoft's website should give you a fairly comprehensive overview of the policy and SMB clients.
http://support.microsoft.com/default.aspx?scid=kb;en-us;887429
If you deal with SOX or are a security conscious company then disabling this policy isn't recommended. You should look into a third party SMB solution such as "Dave" or "ADMitMac" from http://www.thursby.com or a third party AFP solution for your server such as "ExtremeZ-IP" from http://www.grouplogic.com.
Hope this helps! bill
1 GHz Powerbook G4   Mac OS X (10.4.7)  

Similar Messages

  • Temporarily disable Digital Signature Checks to Install MS SQL Server 2008 with no Internet Access

    I am attempting to install a licensed copy of MS SQL Server 2008 in a Private Enclave that does NOT have Internet access on a Win2008 R2 SP1 server (that is VM - thus I can't reboot and press F8 to select "Disable Driver Signature Enforcement"
    ). The installation fails with an error of the vc_red.cab file being found either corrupt or a bad digital signature.  The file is good, but the signature has an expiration of 2011.   I understand that a DOTNET SDK v1.1 program called setreg.exe
    will enable disabling the digital signature check, but I am not permitted to use that program. 
    I might be permitted to use the "Signtool.exe" utility, but it is not clear what command sequences are necessary to disable and then re-enable the Digital Signature checks.
    I saw a thread that recommended using the command:
    bcdedit.exe /set nointegritychecks ON
    However, the comments indicated that this might not have worked.
    Are there Registry settings I can use with regedit to make the necessary changes to be able to install the application?  I anticipate running into this problem with other software when I do not have Internet connectivity.   I already tried
    downloading the Microsoft CRL files; updated the lists on the Server; and rebooted.  This did not solve my problem.  

    Hi,
    As far as I know, it is not recommended to disable digital signature check.
    Since we are not familair with installing MS SQL server, please also refer to SQL forums below to see if experts there have more insights regarding the matter.
    https://social.technet.microsoft.com/Forums/sqlserver/en-US/home
    Best Regards,
    Amy
    Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

  • Disable Digital Signatures Completely

    Hello,
    My company is not yet on board with digital signatures, and occassionally people attempt to turn in their forms digitally (with digital signatures) when they should be turning them in on paper with hand written signatures.
    I'm wondering if there is a way to disable electronic signatures when creating a document in Adobe LiveCycle. Right now the only option I have is writing text beneath the signature field saying, "Please don't use electronic signatures", and this isn't exactly ideal.
    Thank you.

    You can either remove the signature field from the form till it's implemented in your organization or modify the form to make the signature field as hidden/invisible.

  • Disable Digital Signatures in 10.1.3?

    I have a PDF form that would give me the "Security setting on this document prevent... placing a signature on it from Adobe Reader" when I clicked the "Sign" tab.
    Now after upgrading to 10.1.3 I don't get this message anymore. It lets me apply a signature. I DO NOT want this. So how can I block digital signatures for the 10.1.3 reader?
    Thanks.

    Are you not seeing the message on opening the Sign pane with your form? There were some enhancements made in Reader v. 10.1.3 around enabling Sign pane options depending upon the document permissions. For Acroforms that are not Reader-Extended, dont have digital signature fields or that dont have any Submit button will now have ALL options enabled so that a user can fill and sign an Acroform without having to print it. So if your form does not have any of these, all options will be enabled in Sign pane.
    This feature is completely unrelated to Digital Signatures. Using the Sign pane in Reader, a user can add text and also electronically sign the document (this is not the same as digital signature) using an image of their signature (user can create a 'signature' from a scanned paper which has user's handwritten signature), or create a Typewritten signature or hand-draw a signature, and place it on the PDF.

  • Javascript to disable digital signatures

    Hi,
    Does anyone know of a javascript I can use to turn off the option to create a new digital signature ID in Acrobat 9? I would like for users to just be able to use a preset ID that i would provide for them, and not to be able to create a new ID. Any help would be appreciated.
    Thanks,

    Hi,
    I dont know if you will get this reply, but is there a way to add this key by default for all users? Right now I have to set it up per user.
    Thanks!

  • Windows 7 only gives me active USB ports when the DISABLE DRIVER SIGNATURE ENFORCEMENT is selected during system boot

    I can only use the computer if I press 8 and select "DISABLE DRIVER SIGNATURE ENFORCEMENT". Without this, the system comes up OK but I do not have access to the keyboard and mouse. If I select any other boot option the system boots up but I am
    unable to login since neither the keyboard nor the mouse is working.
    The Device Manager is clean. All drivers work and have digital signatures. I tried to use local group policy editor to disable digital signature enforcement but was not able to make any difference. The OS is 64-bit Windows 7 Professional with Service Pack
    1 and latest updates.
    The system includes a WD USB 3.0 card, which I have been using for over 3 years without any problem. I recently (3 days ago) updated the WD SmartWare for Windows software. It seems that my problem coincides with this update. Since then, I removed WD SmartWare
    and Installation software and restored the Registry to its previous restore point however the problem still exists.
    As per SIGVERIF the not signed drivers are:
    difxapi.dll              7/13/2009      2.1.0.0          Not Signed
    usbccgp.sys              9/4/2013       6.1.7601.18251      Not Signed              
    usbd.sys                 9/4/2013       6.1.7601.18251      Not Signed                        
    usbehci.sys              9/4/2013       6.1.7601.18251      Not Signed                    
    usbhub.sys               9/4/2013       6.1.7601.18251      Not Signed                       
    usbport.sys              9/4/2013       6.1.7601.18251      Not Signed           
    usbuhci.sys              9/4/2013       6.1.7601.18251      Not Signed   
    The problem appears to be related to the not signed USB drivers.
    The current USB 3.0 host controller is from Renesas Electronics (ver. 2.1.39.0). According to the Device Manager it is digitally signed and working fine.
    Does anyone know how to fix this problem?
    Thanks,
    DC

    This issue was fixed on my PC as follows.
    1) Taking ownership of the above usb*.sys files in  the drivers folder
    2) renaming them to usb*.sysold
    3) Using Device Manager to uninstall all USB devices with the yellow warning ! next to them
    4) Doing a Scan for Hardware changes via the Device Manager toolbar and then waiting a few moments whilst the USB devices are re-installed with signed drivers.
    Hope this helps you....
    usb drivers files in my drivers folder after the above process:
    12/02/2013  04:12            19,968 usb8023.sys
    21/11/2010  03:24            32,896 USBCAMD2.sys
    27/11/2013  01:41            99,840 usbccgp.sys
    12/07/2013  10:41           100,864 usbcir.sys
    27/11/2013  01:41             7,808 usbd.sys
    27/11/2013  01:41            53,248 usbehci.sys
    25/03/2011  03:29            52,736 usbehci.sysold
    27/11/2013  01:41           343,040 usbhub.sys
    25/03/2011  03:29           343,040 usbhub.sysold
    25/03/2011  03:29            25,600 usbohci.sys
    27/11/2013  01:41           325,120 usbport.sys
    25/03/2011  03:29           325,120 usbport.sysold
    14/07/2009  00:38            25,088 usbprint.sysold
    11/03/2011  04:37            91,648 USBSTOR.SYS
    25/03/2011  03:29            30,720 usbuhci.sys
    21/11/2010  03:23           184,960 usbvideo.sys
                  19 File(s)      2,783,104 bytes
    The .sysold files are the ones I renamed, I think also renamed the usbccgp.sys - but accidentally deleted it after the rename..

  • Issue with multiple digital signatures disabling fast web view

    Hello, I'm using acrobat 9.1 pro and have some questions regarding an issue using multiple signatures on a pdf.
    Why am I asking the question below? My job involves preparing pdf's for submission to FDA. The FDA requires, among other things, that electronically submitted docs have fast web view enabled.
    I am currently exploring ways of using digital signatures to sign pdf reports and still make sure they are FDA spec compliant. My issue involves a document that would have multiple signature fields. What I do is create at least two signature fields in the doc and then save and optimize while enabling fast web view. When I sign the first box and save, the file retains the fast web view status. Yet, when I apply and signatures past the first one, the file is subsequently set to fast web view off without any obvious way of turning it back on. I am confused as to why it gets disabled only after the second, and not right after even the first one was signed. And, of course, I would like to know if it is possible to maintain fast web view and how to do it. I'll gladly accept "tinkering under the hood" of the file suggestions if they exist as well.
    Please let me know if anything is unclear or you need further information.
    Thanks for your time and help.
    ~Vlad

    Hi Vlad,
    Michael actual had the correct answer. The purpose of a "Linearized" file (i.e. a file that has been Optimized for Fast Web View) is to get the first page to display as soon as possible so you can start reading without waiting for the rest of the file to download. As an aside, the designated first page doesn't necessarily have to be page 0 (PDF's use a zero based counting system for pages), but usually it is. To quote the PDF specification, "The primary focus of Linearized PDF is optimized viewing of read-only PDF documents. It is intended that the Linearized PDF be generated once and read many times. Incremental update is still permitted, but the resulting PDF is no longer linearized and subsequently is treated as ordinary PDF."
    When you sign a PDF file the first time the Save process is a "full save", that is the entire document is rewritten so there are no more than two %%EOF (end-of-file) markers in it. The first EOF designates which page to show first and the second EOF designates the end of the rest of the file (so the browser knows when to stop downloading). However, when you add a second (or subsequent) signature the file is saved as an "incremental save" and all of the new data is tacked onto the the end of the original file. This is so you can do a rollback to the previous signed version and allows Acrobat/Reader to check the integrity of each signature independent of any other signatures. It's the incremental save that breaks the linearized optimization of the file.
    Steve

  • Disabling a digital signature in LiveCycle

    I have a form that have a yes / no question with checkboxes. 
    In some cases there should be multiple digital signatures, in others only 1. 
    I want the digital signature line to be disabled if the "No" checkbox is selected. 
    I would also like the space where the digital singature goes to say "N/A" if the second digital signature is unnecessary.
    Is that possible?
    Thanks,

    Which version of LiveCycle Designer are you using? Action Builder is available in latest versions of Designer and it's very easy to use.
    Action Builder option should be available under Tools Menu and you can go through Designer help to learn more about it.
    Attached a sample file (SigFields.pdf) might help.
    --Santosh

  • How can I disable the digital signature feature?

    how can I disable  the digital signature feature?

    If it can be done (doubtful) there will be details in the Enterprise Deployment documentation.  Enterprise Deployment (Acrobat and Reader)

  • Digital Signatures- either disable reader abilities or  any other work around

    I am fairly new to acrobat
    I have designed a form that uses a JavaScript that looks at individual fields to verify if the information is good. I also require two signatures along with these correctly entered fields before I consider the form "good to go"
    (If the form is missing something, my form validation JavaScript will population the value of a text box with the list of which fields are bad.  The warning goes away when everything is good)
    I can’t find the correct property in JavaScript that reference if the digital signature field is signed or not, so I put in the signed event JavaScript that locks the field when signed.
    In my form validation script, I check to see if that digital signature field is locked- if so- then they must have signed it.
    Here is where I am running into trouble:
    After rights are extended to reader (my users will use reader to fill out this pdf)
    It’s possible for the user to sign it, (locking the field) and then clear the digital signature (but the locked field tells my validation script its “okay”)
    Locking the field does not stop someone from clearing it, which is not good.
    Also, someone using reader can add a digital signature on top of where I want them to sign it- and my validation script doesn’t know about this, so it won’t remove the warning if they add their own signature.
    How do I:
    ((Find the javascript property to know if a particular digital signature field is signed.)
    OR
    (Find a way to not allow the user to clear their signed signature))
    AND
    (Stop the user from adding their own digital signature field to the form?)
    Thank you.

    One last try.
    You help would really be welcome in finding out the root cause of the difference in behaviour between reader 8 and 9 in this matter (bug or change).
    I have no idea what documentation to read (since i've read the launch documentation and change list documentation) about reader 9, i've contacted Adobe 3 days ago (and the answer is silence, like usuall) and have no clear thought about what to say (without taking a huge risk by giving a uninformed answer) about this issue.
    Thanks.

  • Excel 2013 crash - related to digital signature?

    This is a cross-posting of a thread originally started in Microsoft Answers (Office- Excel) forum, advised to post in this forum by MS support engineer Mohan Suryanarayan (link to other forum: here).
    I have a VB macro in file A (which otherwise contains only several Excel Tables with named ranges). My digital signature (for signing code) is attached to file A.
    As the macro executes, the Open file dialog is called up so that the User can select a secondary file to open (file B or C).
    Files B and C contain several sheets with formulas and Excel Tables, and also their own extensive VB macros. My digital signature is also attached to files B & C.
    The remainder of the macro in file A simply executes an update of the Excel Tables in the secondary file, before saving & closing it.
    I have been finding that during execution of the file A macro, Excel crashes and closes all open Excel files.
    If I remove the digital signature from the secondary files then the macro in file A executes with no problem.
    The macro was written in Excel 2007 and on a different laptop, with different digital signature, and used to have no problem at all. When a new laptop was purchased a new digital signature was obtained and placed into all of the files.
    Execution of file A is a critical process - I need help with stopping the crash, while maintaining a digital signature in the secondary files (so that their own macros can execute).
    Event Viewer error shows the following:
    Faulting application name: EXCEL.EXE, version: 15.0.4667.1000, time stamp: 0x543d366c
    Faulting module name: mso.dll, version: 0.0.0.0, time stamp: 0x5447696f
    Exception code: 0xc0000602
    Fault offset: 0x011aafdd
    Faulting process id: 0x2d58
    Faulting application start time: 0x01d01e17eafcd0bb
    Faulting application path: C:\Program Files\Microsoft Office 15\root\office15\EXCEL.EXE
    Faulting module path: C:\Program Files (x86)\Common Files\Microsoft Shared\Office15\mso.dll
    JL Latham replied:
    Tom, all I can give you is relatively non-information.  I haven't experienced that type of behavior even in Excel 2013 with digitally signed macros in multiple workbooks.  But my digital signature is a commercial one from DigiCert, not
    self-cert.  I'm not even sure what piece of Excel or Office processes the digital signature (that is, whether it is mso.dll or not).  But your whole process has more moving parts than most of mine involving multiple workbooks do - I quite often turn
    off .EnableEvents when doing things like that just so event driven macros in the other workbook(s) do not execute.
    Do the macros in the 'B files' have to execute during all of this processing in file A?  If not, have you tried turning interrupts off:
    Application.EnableEvents = False
    before starting to work with the B-files?  Maybe something in them, such as a Worksheet_Change() or other event triggered process is messing things up?
    If you do use  Application.EnableEvents=False, remember that you MUST re-enable that later in the code with Application.EnableEvents=True to get responses to things like button clicks, changes in a worksheet or other event driven processes
    to run 'normally' again.
    Have you looked at this discussion:
    http://answers.microsoft.com/en-us/office/forum/office_2013_release-excel/excel-2013-crashing-immediately-when-attempting-to/ea2ab100-5525-4a0d-a3cf-6977319f954f
    Sounds very similar to yours - original signature created in 2007, and crashing in 2013.  Some suggestions were made, but whether they fixed the issue or not is unknown: OP never came back and said "fixed it" or "didn't fix it".
    I replied:
    In answer, the secondary B files don't execute any part of their macros during the A file process, and I hadn't included an EnableEvents = False within the file A code. However, I have just tried it to check if it made any difference and unfortunately it didn't.
    I had read the thread you gave a link to before posting, and also the sub threads given within that one, but didn't see anything I thought of immediate parallel other than an Excel 2013 crash.
    The way I read the linked thread was that a User added a signature in Excel 2007 and when they tried to open the file Excel (2007?) crashes, although other people using Excel 2013 can open it (not clear whether it means others can open the one with
    the 2007 signature or without it).
    Anyway, the differences in my situation are that:
    (1) my B-files were originally created in Excel 2007 on a different laptop to current and had their own signature attached. I maintain a 'stock' of B-file versions, some of which have the old signature and some the new. If I run the A-file macro
    on one of the B-files with the old signature then it executes ok;
    (2) I am able to open the B-files ok, no matter whether the signature in them derives from the old laptop with Excel 2007 or the new laptop with Excel 2013;
    (3) the macros within the B-files execute ok (this includes any versions of the B-files which still have an old signature attached, by removing the old signature and replacing with the new and executing on the new laptop);
    (4) the offending operation which triggers the crash (when the B-files have the new signature attached) is a Resize of the Excel Tables within the B-file. I understand that I may eventually have to find a workaround for this operation but initially
    I want to sort out the signature issue (I'm reasonably sure the signature issue is not a red herring where the Resize is the 'real' problem).
    Regards, Tom

    Hi,
    According to your description, this issue occurred with some particular files that stored in SharePoint site. Did the user  download the file to local disk to print?
    Based on the event log >>Faulting module name: EXCEL.EXE<<, it does not show the root Faulting module. Thus, please try to follow this KB to do general troubleshooting:
    https://support.microsoft.com/en-us/kb/2758592
    Then, if you have used "printer status application", please go to Device settings -> Installable options -> Printer Status notification and select disable.
    If this issue still exists, we may need to collect the App crash dump file:
    https://technet.microsoft.com/en-us/sysinternals/dd996900.aspx
    You can try to analyze dump by yourself if you would like to：
    How to analyze app crash dump file:
    http://blogs.technet.com/b/askperf/archive/2007/05/29/basic-debugging-of-an-application-crash.aspx
    Regards,
    George Zhao
    TechNet Community Support
    It's recommended to download and install
    Configuration Analyzer Tool (OffCAT), which is developed by Microsoft Support teams. Once the tool is installed, you can run it at any time to scan for hundreds of known issues in Office
    programs.
    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • Digital signature issues with windows 7

    My iphone won't open on my computer like it use to. This all happened when I updated my itunes software. I get a digital signature error. Apple says its a Windows problem. Windows says its an apple problem. Someone please help.

    Perfect, thanks.
    I see that one's got an SPI firewall:
    http://www.netgear.co.uk/pdfs/dgn2000ds18july08
    By way of experiment, try disabling the firewall and doing another iTunes download. Are you able to get a working installer this time?

  • Is there a script for making a digital signature read-only after signing?

    When the user signs a PDF Form, the user can clear his own signature. I want to disable the "Clear Signature" feature. I noticed I can run a Javascript in the digital signature's property. Is it possible to execute a Javascript to make just that signature Read-only?
    Thanks.

    If the person who signed the document has Acrobat Pro, you could use the flattenPages() method, which lets you specify the page(s) to be flattened.
    For example:
    this.flattenPages(0)         //flattens page 1
    this.flattenPages(0, 2)     //flattens pages 1 - 3
    But if they have only Reader, they can't use flattenPages().

  • Itunes wont install on vista, No digital signature

    I had a problem were Itunes would not update or anything Apple related (quicktime etc) so i deleted Itunes and tried to run it as a fresh copy.
    Yet when i download it and try to run the application i get the box from windows asking me if i want to run it, but in this box next to publisher it says unknown.
    When i click run nothing happens. The box disappears and thats that.
    If i click on the application and go into properties and go into digital signatures it says the digital signture is not valid. Ive tried downloading it with Explorer, Firefox incase that was it. I have even done a clean install of windows and tried to install itunes first incase there was a conflict.
    Can anyone please help because its driving me nuts!

    Mr. Peck-- Would like your advice re: where to post this question. I cannot update ITunes and Quicktime to the newest version using apple update in the windows environment. I have tried disabling antivirus software without help. Error is that it is not receiving a "valid signature." Installation on the mac side of updated quicktime and Itunes works fine. Windows version is XP SP3-- with appropriate updates.
    Is there a solution that you know of? Where would you suggest posting this question?
    Thank you,
    Mark D

  • Digital Signatures/Javascript After Signing?

    Hello everyone,
    I'm currently developing forms for my company, post processed through Adobe Acrobat 9 Standard, that require digital signatures. Working in the food industry requires compliance to specific FDA guidelines, specifically CFR 21 part 11. In order to meet the requirements I must develop an SOP (Standard Operating Procedure) that proves signatures are accurate and secure.
    The process is tedious, and I have called a few meetings thus far to discuss some of the unforseen circumstances. During the discussion a question was brought up stating; What protects forms stored in the archives (3 years for compliance) from being corrupted by a disgruntled employee? Specifically, what stops an employee from clearing a digital signature? I realize we can set up file access rights to the forms to prevent such happenings, but majority of the forms are setup to hold 6 months to a year of info, thus wouldn't be archived until filled completely.
    My question: Does anyone out there know of a javascript or trick to disable the "Clear Signature" function after signed? I've been searching and have turned up empty handed. Also, does anyone have any other javascripts that are used after digital signature occurs?
    Thanks in advance for any help you can give me,

    George,
    Thanks for your response.
    The issue is not if the file is deleted, the issue is if the files becomes "manipulated". I think "corrupted" was the wrong choice of words.
    To explain: Any form that is completed has several digital signatures within the contents, depending on which QA Technicians complete the task (e.g. Calibrations, Metal Detector Settings, etc...). Forms are setup by days, weeks, or in some cases years, and have designated signature areas for the time period the test was conducted. So, after "John Smith" completes his portion of the form he is required to digital sign the document, after signing is complete all information is set to read only and cannot be altered unless the signature is deleted.
    Digital signatures can be deleted in two ways:
    1. The user who signed the document, based on active directory, has the ability to "clear signature". As and FYI: no other user is capable of deleting a signature signed by another employee. (does not apply to the form author)
    2. The file creator can add a "Reset button" control, thus being able to delete any data specified.
    So as I said I'm looking for a way to lock all signature functions, after sign is completed, even for the original signer. So if form "Calibration01" is currently being filled out and has signatures x,y,and z on it; I want to make sure if "x" is disgruntled they do not maliciously go and clear their signature. Also, I would like all fields associated with the signature to be locked without any way for the user to manipulate or revise data.
    If anyone has any javascripts that run once signer digitally signs, it would be a great help,
    Thanks,

Maybe you are looking for