IPv6 group policy setting for privacy and address randomization

Posted on 2011-04-20
Last Modified: 2012-05-11
Our campus network requires we set two options on Windows computers for IPv6 using netsh:

netsh interface IPV6 set global randomizeidentifier=disabled store=persistent
netsh interface IPV6 set privacy state=disable store=persistent

I want to propagate this by group policy but would prefer not to have it as a startup script because it really only needs to be run once, not as added baggage to each and every boot. There are several IPv6 settings available in group policy, but these two are not among them.

Does anyone know where these settings are stored or any good way to propagate these settings? I'm hoping to be able to push a registry entry or something like that.
Question by:MichaelSparks
    LVL 3

    Accepted Solution

    Unfortunately, these settings are stored in NSI, and are not exposed through the registry at all. There is no publicly available method for changing these settings other than NETSH.

    LVL 2

    Author Comment

    I haven't heard of NSI before, what is that?
    LVL 3

    Expert Comment

    Network Store Interface; it's an internal array for interface configuration. I shouldn't have mentioned it; it's not publicly available.
    LVL 2

    Assisted Solution

    Found a solution. Group Policy, Computer Configuration, Windows Settings, Preferences, Registry, add the netsh command to SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce and set it to action replace and apply once and do not reapply.

    It turns out this works without having to create a batch file too, just enter the full netsh ... command with options.

    I like this because it doesn't run every time adding baggage to the boot process and it doesn't use a batch file that has to be distributed or reached over the network, which also might slow down bootup, especially for mobile clients.
    LVL 2

    Author Closing Comment

    Helpful info that there is no other way than netsh to change those settings, but didn't answer the question of how to propagate the setting using AD.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Free book by J.Peter Bruzzese, Microsoft MVP

    Are you using Office 365? Trying to set up email signatures but you’re struggling with transport rules and connectors? Let renowned Microsoft MVP J.Peter Bruzzese show you how in this exclusive e-book on Office 365 email signatures. Better yet, it’s free!

    Suggested Solutions

    Scenario:  You do full backups to a internal hard drive in either product (SBS or Server 2008).  All goes well for a very long time.  One day, backups begin to fail with a message that the disk is full.  Your disk contains many, many more backups th…
    Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
    This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…
    The viewer will learn how to download, install and use CrashPlan from on Windows 7. Open your browser and go to Click get started, it’s free then Click the Download CrashPlan button: Click save in Internet Explorer, the…

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    20 Experts available now in Live!

    Get 1:1 Help Now