• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 575
  • Last Modified:

AD GPO - Only Delete User Configuration Settings

This is probably a simple question, but seeing as I have done multiple searches through google, EE, and my AD books I still cant find an answer.

Is there a way to DELETE (not disable) the User Configuration Settings that were previously setup in a GPO?  I don't want to delete the GP as I have workstation policies that I want to keep, but I just want to get rid of the User settings inside the GPO.  

Again I dont want to use the "Disable User Configuration settings" option, I am looking for the "Delete/Remove User Configuration settings" option.

Thanks for any help.
0
nakoz69
Asked:
nakoz69
  • 2
1 Solution
 
Mike KlineCommented:
No, there isn't a way that I know of to either delete or just remove all the user settings.  Even if you remove the GPO there is still the possibility of tattooing on some settings   http://www.gpoguy.com/FAQs/Whitepapers/tabid/63/articleType/ArticleView/articleId/5/Understanding-Policy-Tattooing.aspx
 
Thanks
Mike
0
 
KCTSCommented:
There is no way - I know you said you didn't want to but you could disble the user config - that would do what you want and also speed up GPO processing as its not trying to read and apply a load of blank settings
0
 
Mike KlineCommented:
There is definitely debate about disabling a portion of the GPO for perf gains.  I used to think it would yield good gains until I read Darren's article a few years ago
http://technet.microsoft.com/en-us/magazine/2008.01.gpperf.aspx
 ****from the link****
In addition, disabling the computer or user side of a GPO because it is unused has little effect on policy processing performance. If a policy side is unused, the only overhead will be in querying Active Directory to determine that, and the same query must be performed to view the disable option as the one that occurs to determine whether any CSEs have been implemented for that side of the GPO. The effect of disabling a side is negligible.
****
Thanks
Mike
 
0
 
James HaywoodCommented:
I would do the following

Remove the GPO from the client completely http://support.microsoft.com/kb/313222/en-us & http://cobracommunications.co.uk/2010/09/14/remove-group-polices-from-clients/

Change the GPO by setting all user settings to not-configured

Run gpupdate /force on the client to reapply the new version of the GPO
0

Featured Post

Visualize your virtual and backup environments

Create well-organized and polished visualizations of your virtual and backup environments when planning VMware vSphere, Microsoft Hyper-V or Veeam deployments. It helps you to gain better visibility and valuable business insights.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now