Solved

Disabling GPO and Killpol

Posted on 2013-12-20
4
3,004 Views
Last Modified: 2013-12-30
1) How does Killpol disable the applied GPO ? How does it revert the GPO ?
2) How can I create a simple BATCH file to perform similar functions ?
0
Comment
Question by:kaerez
  • 3
4 Comments
 
LVL 77

Expert Comment

by:arnold
ID: 39733067
Check the GPO properties on what happens when it no longer applies.
Once you make sure the GPO settings will revert when it no longer applies.  Let the GPO remain in place for a week or so to make sure the changes if made will have enough time to propagate. Then unlink/remove the policy from applying.  Depending on the settings it control that may not revert.
0
 
LVL 12

Expert Comment

by:Dave
ID: 39740300
I don't know how Killpol disables GPOs and it appears to no longer be available for download so its hard to find out. Policies to be applied end up stored in:-

HKEY_LOCAL_MACHINE\Software\Policies\

and

HKEY_CURRENT_USER\Software\Policies\

generally removing the keys causes the policies to be removed instantly. They automatically re-apply after 15 minutes. So in order to remove "most" policies all you need to do is delete the key in question AND prevent the policy being re-applied.

So check the above keys in the registry and see what KillPol does to them Then replicate this in a batch script.
0
 
LVL 12

Accepted Solution

by:
Dave earned 500 total points
ID: 39740318
Ok found how to stop them re-applying here:-

http://blogs.technet.com/b/markrussinovich/archive/2005/04/30/circumventing-group-policy-settings.aspx

....to stop GP from reapplying.

To change the refresh interval for computers:
Registry key: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\ System
Name: GroupPolicyRefreshTime
Type: REG_DWORD
Valid range for data (in minutes): 0 to 64800

• To change the offset interval for computers:
Registry key: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\ System
Name: GroupPolicyRefreshTimeOffset
Type: REG_DWORD
Valid range for data (in minutes): 0 to 1440



To change the refresh interval for users:
Registry key: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\ System
Name: GroupPolicyRefreshTime
Type: REG_DWORD
Valid range for data (in minutes): 0 to 64800

• To change the offset interval for users:
Registry key: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\ System
Name: GroupPolicyRefreshTimeOffset
Type: REG_DWORD
Valid range for data (in minutes): 0 to 1440


0 == Never
0
 
LVL 12

Expert Comment

by:Dave
ID: 39740329
Sorry you can use the "reg delete" to delete the values you want to delete.
0

Featured Post

Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
In this article, I will show you HOW TO: Install VMware Tools for Windows on a VMware Windows virtual machine on a VMware vSphere Hypervisor 6.5 (ESXi 6.5) Host Server, using the VMware Host Client. The virtual machine has Windows Server 2016 instal…
As developers, we are not limited to the functions provided by the VBA language. In addition, we can call the functions that are part of the Windows operating system. These functions are part of the Windows API (Application Programming Interface). U…
This Micro Tutorial will give you a basic overview of Windows DVD Burner through its features and interface. This will be demonstrated using Windows 7 operating system.

803 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question