Resources For IT Professionals
Post an article
Wikis - Page Details
  • First published by (eMicrosoft Partne)
  • When: 3 Dec 2011 4:51 PM
  • Last revision by (aMicrosof)
  • When: 17 Oct 2012 6:09 PM
  • Revisions: 7
  • Comments: 3
Options
RSSSubscribe to Article (RSS)
Can You Improve This Article?
Positively! Click Sign In to add the tip, solution, correction or comment that will help other users.

Report inappropriate content using these instructions.
Wiki  >  TechNet Articles  >  How to Disable IPv6 through Group Policy

How to Disable IPv6 through Group Policy

How to Disable IPv6 through Group Policy

In order to truly disable IPv6, you must disable it in the registry in the following KB929852 article:

How to disable IP version 6 (IPv6) or its specific components in Windows 7, in Windows Vista, in Windows Server 2008 R2, and in Windows Server 2008

But, you can use Jeff Guillet's (Exchange MVP) ADMX and ADML files.

Download File:
IPv6Configuration.zip

This ZIP file contains both the ADMX and ADML files:
  • IPv6Configuration.admx - Copy this file to %SYSTEMROOT%\PolicyDefinitions
  • IPv6Configuration.adml - Copy this file to %SYSTEMROOT&\PolicyDefinitions\en-US (Replace en-US with your country's language, as necessary)




Now use the Group Policy Management Console (GPMC) to configure the IPv6 settings.

For example, right click on Default Domain Policy and click Edit.

The new policy will be located under Computer Configuration > Policies > Administrative Templates > Network > IPv6 Configuration.

Read Explain tab.

Here, you can configure the following IPv6 settings:
  • Enable all IPv6 components (Windows default)
  • Disable all IPv6 components (the setting you probably want)
  • Disable 6to4
  • Disable ISATAP
  • Disable Teredo
  • Disable Teredo and 6to4
  • Disable all tunnel interfaces
  • Disable all LAN and PPP interfaces
  • Disable all LAN, PPP and tunnel interfaces
  • Prefer IPv4 over IPv6


Testing with Domain Controller 2008 and Windows 7 Client.

Edit Default Domain Policy, go to Computer Configuration > Policies > Administrative Templates > Network > IPv6 Configuration, Open IPv6 Configuration Policy and set on Disable all IPv6 components and click OK.

Run GPUPDATE /FORCE.

Now, run IPCONFIG /ALL on Windows 7 before Restarting.

Now, Restart Windows 7 and run IPCONFIG /All again.


Additional Info:

Navigate to the following registry key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters\DisabledComponents (32-bit DWORD value)


Configuration combination                        DisabledComponents value
Disable all tunnel interfaces                              0x01
Disable 6to4                                               0x02
Disable ISATAP                                             0x04
Disable Teredo                                             0x08
Disable all LAN and PPP interfaces                         0x10
Disable all LAN, PPP, and tunnel interfaces                0x11
Prefer IPv4 over IPv6                                      0x20
Disable Teredo and 6to4                                    0xA
Disable IPv6 over all interfaces and prefer IPv4 to IPv6   0xFF


Important:

Before disable IPv6 on Windows Server 2008 or 2008 R2 or SBS 2008 and ..., please read this article:

Should I Disable IPv6? No... (Ace Fekay - MVP)
 
, , , , , , , , [Edit tags]
Leave a Comment
  • Please add 5 and 8 and type the answer here:
  • Post
Wiki - Revision Comment List(Revision Comment)
Sort by: Published Date | Most Recent | Most Useful
Comments
  • 17 Oct 2012 6:00 PM

    Ed Price - MSFT edited Revision 3. Comment: Title casing; font style

Page 1 of 1 (1 items)
Wikis - Comment List
Sort by: Published Date | Most Recent | Most Useful
Posting comments is temporarily disabled until 10:00am PST on Saturday, December 14th. Thank you for your patience.
Comments
  • Posted by
    on 9 Dec 2011 12:56 PM

    Great tip, thank you.

  • Posted by
    on 11 Feb 2012 6:58 AM

    Patris_70 edited Revision 2. Comment: added registry key and values

  • Posted by
    on 17 Oct 2012 6:00 PM

    Ed Price - MSFT edited Revision 3. Comment: Title casing; font style

Page 1 of 1 (3 items)