Resources For IT Professionals
Post an article
Wikis - Page Details
  • First published by (eMicrosoft Partne)
  • When: 3 Dec 2011 4:51 PM
  • Last revision by (Microsoft)
  • When: 27 Feb 2018 5:13 PM
  • Revisions: 10
  • Comments: 7
Options
RSSSubscribe to Article (RSS)
Engage!
Wiki Ninjas Blog (Announcements)

Wiki Ninjas on Twitter

TechNet Wiki Discussion Forum


Can You Improve This Article?
Positively! Click Sign In to add the tip, solution, correction or comment that will help other users.

Report inappropriate content using these instructions.
Wiki  >  TechNet Articles  >  How to Disable IPv6 through Group Policy

How to Disable IPv6 through Group Policy

How to Disable IPv6 through Group Policy

[Update by Yong Rhee[MSFT] as of 180227]  Our Windows Product Group does not test anything with IPv6 disabled.  Instead of completely disabling IPv6, since Windows Vista, 7, 8, 8.1, 10 and their corresponding Server OS'es prefer IPv6, instead, if you are really itching to disable IPv6, set the policy/registry, to Prefer IPv4 over IPv6.  Thanks, Yong Rhee.

In order to truly disable IPv6, you must disable it in the registry in the following KB929852 article:

How to disable IP version 6 (IPv6) or its specific components in Windows 7, in Windows Vista, in Windows Server 2008 R2, and in Windows Server 2008

But, you can use Jeff Guillet's (Exchange MVP) ADMX and ADML files.

Download File:
IPv6Configuration.zip

This ZIP file contains both the ADMX and ADML files:
  • IPv6Configuration.admx - Copy this file to %SYSTEMROOT%\PolicyDefinitions
  • IPv6Configuration.adml - Copy this file to %SYSTEMROOT&\PolicyDefinitions\en-US (Replace en-US with your country's language, as necessary)




Now use the Group Policy Management Console (GPMC) to configure the IPv6 settings.

For example, right click on Default Domain Policy and click Edit.

The new policy will be located under Computer Configuration > Policies > Administrative Templates > Network > IPv6 Configuration.

Read Explain tab.

Here, you can configure the following IPv6 settings:
  • Enable all IPv6 components (Windows default)
  • Disable all IPv6 components (the setting you probably want)
  • Disable 6to4
  • Disable ISATAP
  • Disable Teredo
  • Disable Teredo and 6to4
  • Disable all tunnel interfaces
  • Disable all LAN and PPP interfaces
  • Disable all LAN, PPP and tunnel interfaces
  • Prefer IPv4 over IPv6


Testing with Domain Controller 2008 and Windows 7 Client.

Edit Default Domain Policy, go to Computer Configuration > Policies > Administrative Templates > Network > IPv6 Configuration, Open IPv6 Configuration Policy and set on Disable all IPv6 components and click OK.

Run GPUPDATE /FORCE.

Now, run IPCONFIG /ALL on Windows 7 before Restarting.

Now, Restart Windows 7 and run IPCONFIG /All again.


Additional Info:

Navigate to the following registry key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters\DisabledComponents (32-bit DWORD value)


Configuration combination                        DisabledComponents value
Disable all tunnel interfaces                              0x01
Disable 6to4                                               0x02
Disable ISATAP                                             0x04
Disable Teredo                                             0x08
Disable all LAN and PPP interfaces                         0x10
Disable all LAN, PPP, and tunnel interfaces                0x11
Prefer IPv4 over IPv6                                      0x20
Disable Teredo and 6to4                                    0xA
Disable IPv6 over all interfaces and prefer IPv4 to IPv6   0xFF


Important:

Before disable IPv6 on Windows Server 2008 or 2008 R2 or SBS 2008 and ..., please read this article:

Should I Disable IPv6? No... (Ace Fekay - MVP)
 
, , , , , , ,
Sort by: Published Date | Most Recent | Most Useful
Comments
  • 9 Dec 2011 12:56 PM

    Great tip, thank you.

  • 11 Feb 2012 6:58 AM

    Patris_70 edited Revision 2. Comment: added registry key and values

  • 23 Jun 2014 1:32 PM

    You comment "In order to truly disable IPv6, you must disable it in the registry in the following KB929852 article" leads me to believe this way will not truly disable IPv6 anfd the KB is just a bunch of FixIt"s. Will this group policy work? Can this be used safely?

  • 17 Oct 2014 1:02 PM

    i think is this just enforcing the policy on domain joined computers , once you leave the domain it wold revert back to default, and if you want to disable it on your workstation you have to edit your registry , which is what the fixit will do on that kb page

  • 30 Mar 2015 8:41 AM

    These Templates are not recognized by Server 2012 Group Policy Management.

  • 1 Jul 2016 6:51 AM

    Is there a way to UNBIND automatically IPV6 from any interface (ie: remove the V flag) ?

    Using this policy, Interface Properties remain unchanged :-(

Page 1 of 1 (6 items)