tag:blogger.com,1999:blog-798194812750898417.post6900647747366194385..comments2024-03-27T09:53:39.301-07:00Comments on The EXPTA {blog}: How to Configure IPv6 Using Group PolicyJeff Guillet - @exptahttp://www.blogger.com/profile/05278298222887921824noreply@blogger.comBlogger29125tag:blogger.com,1999:blog-798194812750898417.post-4147323896354740242013-03-04T02:59:59.291-08:002013-03-04T02:59:59.291-08:00hi
fantastic gpo. thanks a lot
one question though...hi<br />fantastic gpo. thanks a lot<br />one question though regarding windows clustering in server 2008<br />as the virtual failover adapter uses/prefers 1pv6 for node-node communication will this policy break that functionality?<br /><br />thanksAnonymousnoreply@blogger.comtag:blogger.com,1999:blog-798194812750898417.post-13579981332070265042012-10-01T09:04:03.199-07:002012-10-01T09:04:03.199-07:00Simple as abc! Thanks!Simple as abc! Thanks!Anonymoushttps://www.blogger.com/profile/04016728196475707841noreply@blogger.comtag:blogger.com,1999:blog-798194812750898417.post-52144322790164606172012-02-02T02:14:33.148-08:002012-02-02T02:14:33.148-08:00Has anyone discovered a way of turning off that ti...Has anyone discovered a way of turning off that tickbox? We've got an issue on our domain where PC's with this tickbox set are taking anywhere up to 3 hours to log in, but if you untick that box, it works fine. Looks like it's the act of getting an IPv6 address causes it. Would be great if there was a way to untick this via group policy...<br /><br />Thanks.SMAndyhttps://www.blogger.com/profile/05391623962448910034noreply@blogger.comtag:blogger.com,1999:blog-798194812750898417.post-54872373497457259612011-12-01T00:15:13.704-08:002011-12-01T00:15:13.704-08:00Awesome, thank you very much!!
When disabling IPV...Awesome, thank you very much!!<br /><br />When disabling IPV6 via regedit or via the ADMX which is the same the tick will still appear in the IPV6 properties regardless of which setting you apply.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-798194812750898417.post-39849659764597190932011-10-10T07:21:59.444-07:002011-10-10T07:21:59.444-07:00After MUCH searching, I consider THIS post the aut...After MUCH searching, I consider THIS post the authority. There must be NO way to programitacally remove the check in the adapters' properties for IPV6. Thats all there is to it, right? So, the reg edit or the policy will, in fact, disable the protocol but each adapter will still have the check. Is this correct? Thanks again all for a great post here. I appreciate everyones input.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-798194812750898417.post-67227283274522678272011-10-07T07:38:09.725-07:002011-10-07T07:38:09.725-07:00I created them using the ADMX Migrator tool. http...I created them using the ADMX Migrator tool. http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=15058Jeff Guillet - @exptahttps://www.blogger.com/profile/05278298222887921824noreply@blogger.comtag:blogger.com,1999:blog-798194812750898417.post-55453544565904571842011-10-07T04:18:53.662-07:002011-10-07T04:18:53.662-07:00thanks a lot Jeff for creating and sharing these c...thanks a lot Jeff for creating and sharing these custom templates!<br />how did you create these custom ADMX and ADML files? is there any tool for that?Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-798194812750898417.post-6936971458103616282011-09-23T08:55:58.757-07:002011-09-23T08:55:58.757-07:00Thanks that makes sense however i dont actually wa...Thanks that makes sense however i dont actually want to turn it all off. To start with if I can id like to just disable all the tunneling methods. And then if possible also prefer IPv4 over IPv6, the idea is to jsut have IPv6 stack and none of the extra junk.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-798194812750898417.post-47059054580444014252011-09-22T10:47:46.464-07:002011-09-22T10:47:46.464-07:00If you set the DisabledComponents key to 0xFFFFFFF...If you set the DisabledComponents key to 0xFFFFFFFF, it will achieve what you want because all IPv6 components are disabled.<br /><br />See http://support.microsoft.com/kb/929852Jeff Guillet - @exptahttps://www.blogger.com/profile/05278298222887921824noreply@blogger.comtag:blogger.com,1999:blog-798194812750898417.post-86103182730862030632011-09-22T08:30:19.483-07:002011-09-22T08:30:19.483-07:00Great post, one quesiton. How do i disable multip...Great post, one quesiton. How do i disable multiple items. e.g. disable ISATAP, Teredo and also prefer V4 over V6?Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-798194812750898417.post-39679210546114470212011-08-23T08:20:10.776-07:002011-08-23T08:20:10.776-07:00yes you can create those folders: http://technet.m...yes you can create those folders: http://technet.microsoft.com/en-us/library/cc748955(WS.10).aspxAnonymousnoreply@blogger.comtag:blogger.com,1999:blog-798194812750898417.post-65908345279315120862011-07-14T04:24:33.708-07:002011-07-14T04:24:33.708-07:00Hi Jeff,
I have followed your instruction and sho...Hi Jeff,<br /><br />I have followed your instruction and show hidden files and folders, and show protected windows operating system files, but still no luck. Is there anyway around it.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-798194812750898417.post-73629641339350106992011-07-05T10:14:50.858-07:002011-07-05T10:14:50.858-07:00Hi David,
Those folders should be created by defa...Hi David,<br /><br />Those folders should be created by default on any Windows 2008 or better domain controller. Ensure that you've configured Windows Explorer to show hidden files and folders and to show protected Windows operating system files.Jeff Guillet - @exptahttps://www.blogger.com/profile/05278298222887921824noreply@blogger.comtag:blogger.com,1999:blog-798194812750898417.post-13942644634700679612011-07-05T09:17:42.026-07:002011-07-05T09:17:42.026-07:00I don't have a Policies\PolicyDefinitions fold...I don't have a Policies\PolicyDefinitions folder, just several GUID entries in brackets. Can I create those folders (I think not as they're obviously supposed to be autocreated)<br /><br />Any suggestions?David Pagenoreply@blogger.comtag:blogger.com,1999:blog-798194812750898417.post-38231479279270705662011-06-17T12:09:42.632-07:002011-06-17T12:09:42.632-07:00just for grins, i used group policy preferences co...just for grins, i used group policy preferences couldn't we just write the registry entry HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters\DisabledComponents. i had to put in the value ffffffff for it to show up in the registry as 0xffffffff. so the registry shows up that way but i still see IPv6 checked in the local area connection properties and i get an ipv6 address in ipconfig /all.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-798194812750898417.post-52600231767216490052011-03-18T10:54:00.330-07:002011-03-18T10:54:00.330-07:00Found it.
Had to move the file directly into the d...Found it.<br />Had to move the file directly into the domain folder<br />your-domain-controller\SYSVOL\your-domain\Policies\PolicyDefinitions for the ADMX file, and<br />your-domain-controller\SYSVOL\your-domain\Policies\PolicyDefinitions\en-US for the ADML fileAnonymousnoreply@blogger.comtag:blogger.com,1999:blog-798194812750898417.post-24949606014054523032011-03-18T10:29:56.876-07:002011-03-18T10:29:56.876-07:00Hi,
First, thank you for the effort you put into t...Hi,<br />First, thank you for the effort you put into this settings.<br />However, I did as described above, but when I open the GPMC and go to Computer Configuration > Policies > Administrative Templates > Network ... the IPv6 Configuration folder does not show up at all.<br />Any idea, and thank you in advance.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-798194812750898417.post-84028998816647952462010-09-15T07:59:00.282-07:002010-09-15T07:59:00.282-07:00Thanks!Thanks!D@rLin|{https://www.blogger.com/profile/10811810635580190462noreply@blogger.comtag:blogger.com,1999:blog-798194812750898417.post-14660159264205472562010-08-20T08:27:53.820-07:002010-08-20T08:27:53.820-07:00Back in days I've published a script
http://w...Back in days I've published a script<br /><br />http://www.curuit.com/disable-ipv6-over-all-interfaces-and-prefer-ipv4-to-ipv6-20090129195/<br /><br />that does this, and I've been using this script everywhere, but GPO is much better;). Thanks.<br /><br />P.S.<br />I've republished this post on my website, and if you want to save a website traffic, everybody welcome to download a .ZIP file from my web site as well.Misha Haninhttps://www.blogger.com/profile/10032281165922418711noreply@blogger.comtag:blogger.com,1999:blog-798194812750898417.post-23031865432477336242010-03-30T10:43:51.190-07:002010-03-30T10:43:51.190-07:00This has been an extremely helpful article. I book...This has been an extremely helpful article. I bookmarked it!Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-798194812750898417.post-68020477623331718492010-02-22T10:43:00.164-08:002010-02-22T10:43:00.164-08:00As a follow up to my earlier comment, if you don&#...As a follow up to my earlier comment, if you don't clear the IPv6 setting in the properties of the NIC, an IPv6 address will be assigned to that NIC. <br /><br />But if you disable IPv6 using the registry or GPO options listed in this article, the computer won't use IPv6 for communication even though it has an IPv6 address.Jeff Guillet - @exptahttps://www.blogger.com/profile/05278298222887921824noreply@blogger.comtag:blogger.com,1999:blog-798194812750898417.post-5636956238337514472010-02-22T10:38:47.634-08:002010-02-22T10:38:47.634-08:00You must manually clear the checkbox for IPv6 on e...You must manually clear the checkbox for IPv6 on each network adapter. Unfortunately, there is no way to do this via Group Policy (mainly because each NIC has a unique GUID in the registry).Jeff Guillet - @exptahttps://www.blogger.com/profile/05278298222887921824noreply@blogger.comtag:blogger.com,1999:blog-798194812750898417.post-44035886961798666602010-02-22T09:34:16.058-08:002010-02-22T09:34:16.058-08:00Hi,
Thank you Mr. JEFF for your useful article. I...Hi,<br /><br />Thank you Mr. JEFF for your useful article. I am getting the same issue like Mr. Crus said, after applying this policy in my win 2008 DC. How can disable this permanently from all the systems, when i connect the windows systems in domain.Muralihttps://www.blogger.com/profile/02082260119900350527noreply@blogger.comtag:blogger.com,1999:blog-798194812750898417.post-21280448690353349852009-07-23T04:40:50.328-07:002009-07-23T04:40:50.328-07:00Thanks for this. Nice and easy!Thanks for this. Nice and easy!dphttp://theblackmarketindex.comnoreply@blogger.comtag:blogger.com,1999:blog-798194812750898417.post-67279016357849919242009-09-05T01:18:59.010-07:002009-09-05T01:18:59.010-07:00Hi,thanks for this!But I got one question:After I ...Hi,<br><br>thanks for this!<br><br>But I got one question:<br>After I had applied this to my domain all my clients got the registry entry successfully, but the IPv6 Protocol on the network interface properties is already checked?<br><br>Have I to disable this manually on each client? Because it seems that it is not enough to only add this registry-key to disable it!<br><br>regards,<br>CrusCrusnoreply@blogger.com