DefSec.blog

DefSec.blog – Random IT Stuff, Cybersecurity, Active Directory

Menu
  • Cybersecurity
  • Active Directory
  • Azure Active Directory
Menu

How to remove domain applied GPO settings

Posted on February 8, 2023February 8, 2023 by th3alch3m1st

If you end up with a computer that needs its domain applied GPOs cleared, i.e. the computer has been removed from the domain or there are settings applied via GPO that are blocking all communications with the domain controllers and new settings can’t be obtained follow the steps below.

Note – modifying the registry is for advanced users as it’s a dangerous process that can cause serious issues to your Windows system.

  1. Backup your registry keys:
  • Press the Windows key, type run and click on the “Run” app
  • Type regedit in the “Open” field and click OK
  • Once the Registry Editor opens up make sure “Computer” is selected and navigate to File -> Export
  • Choose a location where you want the backup to be saved, the name of the backup and click “Save”

2. Find and delete the following keys:

  • "HKLM\Software\Policies\Microsoft"
  • "HKCU\Software\Policies\Microsoft"
  • "HKCU\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects"
  • "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies"
  • Note – HKLM = HKEY_LOCAL_MACHINE and HKCU = HKEY_CURRENT_USER

3. Exit the Registry Editor and reboot the system

Share on Social Media
x linkedin
  • Active Directory (4)
  • Azure Active Directory (1)
  • Cybersecurity (4)
  • IT Stuff (1)

Recent Posts

  • Disable IPv6 to prevent DNS spoofing

    February 5, 2023
  • Disable Link-Local Multicast Name Resolution(LLMNR) via Group Policy

    January 27, 2023
  • How to reset the Directory Services Restore Mode administrator account password in Windows Server

    January 22, 2023
  • Roll over the Kerberos decryption key of the "AZUREADSSO" computer account

    January 22, 2023
  • Disclaimer
  • Contact
©2023 DefSec.blog