1. | Open Local Security Settings |
2. | In the console tree, click Software Restriction Policies. Where? Security Settings > Software Restriction Policies |
3. | In the details pane, double-click Trusted Publishers. |
4. | Click the group that should have the right to decide what certificates will be trusted. |
5. | (Optional) To have software restriction policies check to see if a certificate is revoked, select the appropriate Publisher and Timestamp check boxes. |
Note
| • | You can choose who can add trusted publishers from End users, Local computer administrators, or Enterprise administrators. For example, you can use this tool to prevent users from making trust decisions about publishers of ActiveX controls. |
| • | Local computer administrators have the right to specify trusted publishers on the local computer, while enterprise administrators have the right to specify trusted publishers on an organizational unit level. |
| • | To open Local Security Policy, click Start, click Control Panel, click Performance and Maintenance, click Administrative Tools, and then double-click Local Security Policy. For more information, see Software restriction policies |