In the script you should be using the group's SID instead of "Administrators". The group name is localized, so the commands would fail on non-English systems; SID is language-independent: Code: $owner.SetOwner([System.Security.Principal.SecurityIdentifier]"S-1-5-32-544") $rule.SetAccessRule([System.Security.AccessControl.RegistryAccessRule]::new([System.Security.Principal.SecurityIdentifier]"S-1-5-32-544", "Full", 0, 0, 0))
Ok. Do you by any chance know if the device ID for a device changes with each driver update? Btw mate, thanks for all your help. Really appreciated. Have you tried this yourself?
It may have been mentioned already but DDU (Display Driver Uninstaller) has a feature to disable them from installing AFAIK.
No, the Device ID usually never changes with an addon card. For onboard motherboard devices, a device ID may change under really, really rare circunstances after a BIOS update.
Hi, I'm surprised because I enabled the GPO that prevent to install drivers from Windows Update, and I can install any driver manually (XPS via "Programs and features"/"Turn Windows features on or off" or even VMware Tools that install my virtual drivers).
After thinking about it, a better solution would be to just disable Automatic Windows Update, and just hide the drivers I don't want updated before WU gets a chance.