Home / server / Questions / 566180
In Process
Mike66350216
Asked: 2014-01-10 09:26:54 +0800 CST

Removing GPO - comprehensive list of 'tattooed and non tattooed' registry settings

  • 772

Is there a comprehensive collection or perhaps even a 'quick guide' to which GPO settings (or registry keys) are protected from GPO 'tattooing'? I have a few clients who have horrendous GPO policies (not well named, some are added to default domain, etc) and in trying to clean things up, I want to ensure I don't break anything inadvertently.

Thanks!

windows

1 Answers

  1. The Group Policy editor will only show settings that do not "tattoo", by default (that is, entries that are made in either HKLM\Software\Policies, HKLM\Software\Microsoft\Windows\CurrentVersion\Policies, or the HKCU versions of the same). You have to alter the filter to display settings that are not "Managed" to see entries that are made outside those portions of the registry.

    Settings made within those keys are removed when the policy no longer applies. Settings outside those keys will "tattoo" the registry.

    • 5