[Last Call] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 3646
  • Last Modified:

Disabling GPO and Killpol

1) How does Killpol disable the applied GPO ? How does it revert the GPO ?
2) How can I create a simple BATCH file to perform similar functions ?
0
kaerez
Asked:
kaerez
  • 3
1 Solution
 
arnoldCommented:
Check the GPO properties on what happens when it no longer applies.
Once you make sure the GPO settings will revert when it no longer applies.  Let the GPO remain in place for a week or so to make sure the changes if made will have enough time to propagate. Then unlink/remove the policy from applying.  Depending on the settings it control that may not revert.
0
 
DaveCommented:
I don't know how Killpol disables GPOs and it appears to no longer be available for download so its hard to find out. Policies to be applied end up stored in:-

HKEY_LOCAL_MACHINE\Software\Policies\

and

HKEY_CURRENT_USER\Software\Policies\

generally removing the keys causes the policies to be removed instantly. They automatically re-apply after 15 minutes. So in order to remove "most" policies all you need to do is delete the key in question AND prevent the policy being re-applied.

So check the above keys in the registry and see what KillPol does to them Then replicate this in a batch script.
0
 
DaveCommented:
Ok found how to stop them re-applying here:-

http://blogs.technet.com/b/markrussinovich/archive/2005/04/30/circumventing-group-policy-settings.aspx

....to stop GP from reapplying.

To change the refresh interval for computers:
Registry key: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\ System
Name: GroupPolicyRefreshTime
Type: REG_DWORD
Valid range for data (in minutes): 0 to 64800

• To change the offset interval for computers:
Registry key: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\ System
Name: GroupPolicyRefreshTimeOffset
Type: REG_DWORD
Valid range for data (in minutes): 0 to 1440



To change the refresh interval for users:
Registry key: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\ System
Name: GroupPolicyRefreshTime
Type: REG_DWORD
Valid range for data (in minutes): 0 to 64800

• To change the offset interval for users:
Registry key: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\ System
Name: GroupPolicyRefreshTimeOffset
Type: REG_DWORD
Valid range for data (in minutes): 0 to 1440


0 == Never
0
 
DaveCommented:
Sorry you can use the "reg delete" to delete the values you want to delete.
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now