Solved

IPv6-DISABLE

Posted on 2012-12-20
6
1,048 Views
Last Modified: 2012-12-25
Hello
I have active directory on windows server 2008 in I have 1000 machines (win 7) added in the AD
Please how can disable the IPv6 on windows 7 via a GPO
Because I think isn't recommanded to activate IPv4 and IPv6 in windows 7 !!!
please give me your opinion and the solution
THX
ipv6.png
0
Comment
Question by:DRRAM
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
6 Comments
 
LVL 57

Accepted Solution

by:
Mike Kline earned 150 total points
ID: 38710875
Natively there is no easy way to do it using group policy.

there is a sample ADMX file below but I have not tested it

http://social.technet.microsoft.com/wiki/contents/articles/5927.how-to-disable-ipv6-through-group-policy.aspx

DS MVP Ace has a great writeup   http://msmvps.com/blogs/acefekay/archive/2010/05/27/how-to-disable-rss-tcp-chimney-feature-and-ipv6.aspx

By the way it is fine to have it enabled.

Thanks

Mike
0
 
LVL 3

Assisted Solution

by:bvic01
bvic01 earned 150 total points
ID: 38710882
You could setup the machines to run a script such as the one I've posted below to disabled the IPv6 components as a whole on every system.

@Echo off
@ECHO Windows Registry Editor Version 5.00 > %TEMP%\DisableIPv6.reg
@ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters] >> %TEMP%\DisableIPv6.reg
@ECHO "DisabledComponents"=dword:000000ff >> %TEMP%\DisableIPv6.reg
REGEDIT /S %TEMP%\DisableIPv6.reg

Read more: http://www.curuit.com/disable-ipv6-over-all-interfaces-and-prefer-ipv4-to-ipv6-20090129195/#ixzz2FclvC6Hj

Also, take a look at this site:
http://www.curuit.com/how-to-disable-ipv6-via-group-policy-%28gpo%29-20100820459/

That is where I found that script as well as a method for using GPO's within windows.

Take a look at this article on why you may not want to disable IPv6 though, he makes some pretty valid arguments.  It is possible to run both at the same time.  Let me know if youd like more info on how to accomplish that, as there are a few different ways.  Hope this helps!

Thanks.
0
 
LVL 19

Expert Comment

by:bevhost
ID: 38712082
Actually I think it IS recommended to have both protocols enabled.
That is why it is enabled by default.
0
NEW Veeam Agent for Microsoft Windows

Backup and recover physical and cloud-based servers and workstations, as well as endpoint devices that belong to remote users. Avoid downtime and data loss quickly and easily for Windows-based physical or public cloud-based workloads!

 
LVL 3

Assisted Solution

by:gaurav2rawat
gaurav2rawat earned 100 total points
ID: 38713105
You might wanna keep ipv6 open as there are some apps which work extensively on ipv6.
A better idea would be to configure dns for ipv6/ipv4 coexistence.
http://technet.microsoft.com/en-us/library/cc738372%28v=ws.10%29.aspx
0
 
LVL 3

Assisted Solution

by:SparkyBoy
SparkyBoy earned 100 total points
ID: 38713118
Here's a how-to article which you can use.

http://social.technet.microsoft.com/wiki/contents/articles/5927.how-to-disable-ipv6-through-
group-policy.aspx

It has to be said that Microsoft do not encourage disabling IPv6 as elements of the OS will use it.  One example is network discovery - though it will revert to IPv4 as required.

I know in an Enterprise environment, Microsoft have not tested disabling IPv6 so any impact will depend on context.
0
 

Author Closing Comment

by:DRRAM
ID: 38720140
THX
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
AD Account lockout 11 65
Change local account password via GPO? 34 69
Why does Acronis Universal Restore fail? 13 59
analyze malware in windows document 9 42
While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
Active Directory security has been a hot topic of late, and for good reason. With 90% of the world’s organization using this system to manage access to all parts of their IT infrastructure, knowing how to protect against threats and keep vulnerabil…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

756 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question