Comments on The EXPTA {blog}: How to Configure IPv6 Using Group Policy

Has anyone discovered a way of turning off that ti...

2012-02-02T02:14:33.148-08:00

Has anyone discovered a way of turning off that tickbox? We've got an issue on our domain where PC's with this tickbox set are taking anywhere up to 3 hours to log in, but if you untick that box, it works fine. Looks like it's the act of getting an IPv6 address causes it. Would be great if there was a way to untick this via group policy...

Thanks.

Awesome, thank you very much!! When disabling IPV...

2011-12-01T00:15:13.704-08:00

Awesome, thank you very much!!

When disabling IPV6 via regedit or via the ADMX which is the same the tick will still appear in the IPV6 properties regardless of which setting you apply.

After MUCH searching, I consider THIS post the aut...

2011-10-10T07:21:59.444-07:00

After MUCH searching, I consider THIS post the authority. There must be NO way to programitacally remove the check in the adapters' properties for IPV6. Thats all there is to it, right? So, the reg edit or the policy will, in fact, disable the protocol but each adapter will still have the check. Is this correct? Thanks again all for a great post here. I appreciate everyones input.

I created them using the ADMX Migrator tool. http...

2011-10-07T07:38:09.725-07:00

I created them using the ADMX Migrator tool. http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=15058

thanks a lot Jeff for creating and sharing these c...

2011-10-07T04:18:53.662-07:00

thanks a lot Jeff for creating and sharing these custom templates!
how did you create these custom ADMX and ADML files? is there any tool for that?

Thanks that makes sense however i dont actually wa...

2011-09-23T08:55:58.757-07:00

Thanks that makes sense however i dont actually want to turn it all off. To start with if I can id like to just disable all the tunneling methods. And then if possible also prefer IPv4 over IPv6, the idea is to jsut have IPv6 stack and none of the extra junk.

If you set the DisabledComponents key to 0xFFFFFFF...

2011-09-22T10:47:46.464-07:00

If you set the DisabledComponents key to 0xFFFFFFFF, it will achieve what you want because all IPv6 components are disabled.

See http://support.microsoft.com/kb/929852

Great post, one quesiton. How do i disable multip...

2011-09-22T08:30:19.483-07:00

Great post, one quesiton. How do i disable multiple items. e.g. disable ISATAP, Teredo and also prefer V4 over V6?

yes you can create those folders: http://technet.m...

2011-08-23T08:20:10.776-07:00

yes you can create those folders: http://technet.microsoft.com/en-us/library/cc748955(WS.10).aspx

Hi Jeff, I have followed your instruction and sho...

2011-07-14T04:24:33.708-07:00

Hi Jeff,

I have followed your instruction and show hidden files and folders, and show protected windows operating system files, but still no luck. Is there anyway around it.

Hi David, Those folders should be created by defa...

2011-07-05T10:14:50.858-07:00

Hi David,

Those folders should be created by default on any Windows 2008 or better domain controller. Ensure that you've configured Windows Explorer to show hidden files and folders and to show protected Windows operating system files.

I don't have a Policies\PolicyDefinitions fold...

2011-07-05T09:17:42.026-07:00

I don't have a Policies\PolicyDefinitions folder, just several GUID entries in brackets. Can I create those folders (I think not as they're obviously supposed to be autocreated)

Any suggestions?

just for grins, i used group policy preferences co...

2011-06-17T12:09:42.632-07:00

just for grins, i used group policy preferences couldn't we just write the registry entry HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters\DisabledComponents. i had to put in the value ffffffff for it to show up in the registry as 0xffffffff. so the registry shows up that way but i still see IPv6 checked in the local area connection properties and i get an ipv6 address in ipconfig /all.

Found it. Had to move the file directly into the d...

2011-03-18T10:54:00.330-07:00

Found it.
Had to move the file directly into the domain folder
your-domain-controller\SYSVOL\your-domain\Policies\PolicyDefinitions for the ADMX file, and
your-domain-controller\SYSVOL\your-domain\Policies\PolicyDefinitions\en-US for the ADML file

Hi, First, thank you for the effort you put into t...

2011-03-18T10:29:56.876-07:00

Hi,
First, thank you for the effort you put into this settings.
However, I did as described above, but when I open the GPMC and go to Computer Configuration > Policies > Administrative Templates > Network ... the IPv6 Configuration folder does not show up at all.
Any idea, and thank you in advance.

Thanks!

2010-09-15T07:59:00.282-07:00

Thanks!

Back in days I've published a script http://w...

2010-08-20T08:27:53.820-07:00

Back in days I've published a script

http://www.curuit.com/disable-ipv6-over-all-interfaces-and-prefer-ipv4-to-ipv6-20090129195/

that does this, and I've been using this script everywhere, but GPO is much better;). Thanks.

P.S.
I've republished this post on my website, and if you want to save a website traffic, everybody welcome to download a .ZIP file from my web site as well.

This has been an extremely helpful article. I book...

2010-03-30T10:43:51.190-07:00

This has been an extremely helpful article. I bookmarked it!

As a follow up to my earlier comment, if you don&#...

2010-02-22T10:43:00.164-08:00

As a follow up to my earlier comment, if you don't clear the IPv6 setting in the properties of the NIC, an IPv6 address will be assigned to that NIC.

But if you disable IPv6 using the registry or GPO options listed in this article, the computer won't use IPv6 for communication even though it has an IPv6 address.

You must manually clear the checkbox for IPv6 on e...

2010-02-22T10:38:47.634-08:00

You must manually clear the checkbox for IPv6 on each network adapter. Unfortunately, there is no way to do this via Group Policy (mainly because each NIC has a unique GUID in the registry).

Hi, Thank you Mr. JEFF for your useful article. I...

2010-02-22T09:34:16.058-08:00

Hi,

Thank you Mr. JEFF for your useful article. I am getting the same issue like Mr. Crus said, after applying this policy in my win 2008 DC. How can disable this permanently from all the systems, when i connect the windows systems in domain.

ok :-) Thanks a lot :-)

2009-10-28T05:19:49.724-07:00

ok :-) Thanks a lot :-)

Make sure that your GPO filters are turned off whe...

2009-10-27T07:57:27.815-07:00

Make sure that your GPO filters are turned off when viewing Administrative Templates. Click View > Filter Options. Managed, Configured and Commented should be set to ANY.

Hi,

I copied the fils in my local folders....

2009-10-27T07:52:36.223-07:00

Hi,

I copied the fils in my local folders.
when I open the Local Group Policy Editor and I navigate to the IPv6 Configuration folder, it is empty.
I tried on another Vista Computer, same thing. Any Ideas?

I'll add my thanks for the posting, and a foll...

2009-09-20T09:25:43.873-07:00

I'll add my thanks for the posting, and a followup to the question from Crus:

The references I've found to disabling IPv6 consistently indicate that setting the Registry value above to 0xFF (or 0xFFFFFFFF) is sufficient to block the use of all of the IPv6 components (protocol, Teredo, 6to4 etc.). Are there any exceptions that require additional actions?

And (even if the Registry change really does block IPv6) is there any scripting mechanism that would allow me to cause the IPv6 components to show as unchecked in the network adapter interface definitions? I support a research organization where some of the project laboratories may have a legitimate need to use IPv6 even if the internal network does not yet support it. While it's not a showstopper to the use of Windows 7 I would like to be able to build a distribution image that at sysprep OOBE time automagically unchecks the various IPv6 components in every network interface to visibly show that IPv6 has been disabled. Any suggestions on how to do this?

Comments on The EXPTA {blog}: How to Configure IPv6 Using Group Policy

Has anyone discovered a way of turning off that ti...

Awesome, thank you very much!! When disabling IPV...

After MUCH searching, I consider THIS post the aut...

I created them using the ADMX Migrator tool. http...

thanks a lot Jeff for creating and sharing these c...

Thanks that makes sense however i dont actually wa...

If you set the DisabledComponents key to 0xFFFFFFF...

Great post, one quesiton. How do i disable multip...

yes you can create those folders: http://technet.m...

Hi Jeff, I have followed your instruction and sho...

Hi David, Those folders should be created by defa...

I don't have a Policies\PolicyDefinitions fold...

just for grins, i used group policy preferences co...

Found it. Had to move the file directly into the d...

Hi, First, thank you for the effort you put into t...

Thanks!

Back in days I've published a script http://w...

This has been an extremely helpful article. I book...

As a follow up to my earlier comment, if you don&#...

You must manually clear the checkbox for IPv6 on e...

Hi, Thank you Mr. JEFF for your useful article. I...

ok :-) Thanks a lot :-)

Make sure that your GPO filters are turned off whe...

Hi, I copied the fils in my local folders....

I'll add my thanks for the posting, and a foll...

Hi,

I copied the fils in my local folders....