How to Disable IPv6 through Group Policy

How to Disable IPv6 through Group Policy

How to Disable IPv6 through Group Policy

Download The ZIP file contains both the ADMX and ADML files:

  • IPv6Configuration.admx – Copy this file to %SYSTEMROOT%\PolicyDefinitions
  • IPv6Configuration.adml – Copy this file to %SYSTEMROOT%\PolicyDefinitions\en-US (Replace en-US with your country’s language, as necessary)

Table

Description automatically generated

Table

Description automatically generated

Now use the Group Policy Management Console (GPMC) to configure the IPv6 settings.

Graphical user interface, text, application

Description automatically generated

For example, create new policy and click Edit.

The new policy will be located under Computer Configuration > Policies > Administrative Templates > Network > IPv6 Configuration.

Read Explain tab.
Here, you can configure the following IPv6 settings:

  • Enable all IPv6 components (Windows default)
  • Disable all IPv6 components (the setting you probably want)
  • Disable 6to4
  • Disable ISATAP
  • Disable Teredo
  • Disable Teredo and 6to4
  • Disable all tunnel interfaces
  • Disable all LAN and PPP interfaces
  • Disable all LAN, PPP and tunnel interfaces
  • Prefer IPv4 over IPv6



Edit Default Domain Policy, go to Computer Configuration > Policies > Administrative Templates > Network > IPv6 Configuration, Open IPv6 Configuration Policy and set on Disable all IPv6 components and click OK.

Run GPUPDATE /FORCE.
Now, run IPCONFIG /ALL on Windows 10 before Restarting.

Text

Description automatically generated

Now, Restart Windows 10 and run IPCONFIG /All again.

Text

Description automatically generated


Additional Info:
Navigate to the following registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters\DisabledComponents (32-bit DWORD value)

Noted: You must manually clear the checkbox for IPv6 on each network adapter.  Unfortunately, there is no way to do this via Group Policy (mainly because each NIC has a unique GUID in the registry).

Leave a Reply

Your email address will not be published.