Solved

Disabling GPO and Killpol

Posted on 2013-12-20
4
3,069 Views
Last Modified: 2013-12-30
1) How does Killpol disable the applied GPO ? How does it revert the GPO ?
2) How can I create a simple BATCH file to perform similar functions ?
0
Comment
Question by:kaerez
  • 3
4 Comments
 
LVL 77

Expert Comment

by:arnold
ID: 39733067
Check the GPO properties on what happens when it no longer applies.
Once you make sure the GPO settings will revert when it no longer applies.  Let the GPO remain in place for a week or so to make sure the changes if made will have enough time to propagate. Then unlink/remove the policy from applying.  Depending on the settings it control that may not revert.
0
 
LVL 12

Expert Comment

by:Dave
ID: 39740300
I don't know how Killpol disables GPOs and it appears to no longer be available for download so its hard to find out. Policies to be applied end up stored in:-

HKEY_LOCAL_MACHINE\Software\Policies\

and

HKEY_CURRENT_USER\Software\Policies\

generally removing the keys causes the policies to be removed instantly. They automatically re-apply after 15 minutes. So in order to remove "most" policies all you need to do is delete the key in question AND prevent the policy being re-applied.

So check the above keys in the registry and see what KillPol does to them Then replicate this in a batch script.
0
 
LVL 12

Accepted Solution

by:
Dave earned 500 total points
ID: 39740318
Ok found how to stop them re-applying here:-

http://blogs.technet.com/b/markrussinovich/archive/2005/04/30/circumventing-group-policy-settings.aspx

....to stop GP from reapplying.

To change the refresh interval for computers:
Registry key: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\ System
Name: GroupPolicyRefreshTime
Type: REG_DWORD
Valid range for data (in minutes): 0 to 64800

• To change the offset interval for computers:
Registry key: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\ System
Name: GroupPolicyRefreshTimeOffset
Type: REG_DWORD
Valid range for data (in minutes): 0 to 1440



To change the refresh interval for users:
Registry key: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\ System
Name: GroupPolicyRefreshTime
Type: REG_DWORD
Valid range for data (in minutes): 0 to 64800

• To change the offset interval for users:
Registry key: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\ System
Name: GroupPolicyRefreshTimeOffset
Type: REG_DWORD
Valid range for data (in minutes): 0 to 1440


0 == Never
0
 
LVL 12

Expert Comment

by:Dave
ID: 39740329
Sorry you can use the "reg delete" to delete the values you want to delete.
0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When you start your Windows 10 PC and got an "Operating system not found" error or just saw  "Auto repair for startup" or a blinking cursor with black screen. A loop for Auto repair will start but fix nothing.  You will be panic as there are no back…
Learn how to PXE Boot both BIOS & UEFI machines with DHCP Policies and Custom Vendor Classes
As developers, we are not limited to the functions provided by the VBA language. In addition, we can call the functions that are part of the Windows operating system. These functions are part of the Windows API (Application Programming Interface). U…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question