secedit /configure /db Disable.sdb /cfg Disable.inf /quiet
gpupdate /force



Disable.inf


[version]
signature="$CHICAGO$"
[Registry Values]
MACHINE\Software\Microsoft\Driver Signing\Policy=3,0