1

Couldn't find a clear and consolidated article on the "official" way to do this.

Is there a definitive way to revert all the changes that a given GPO will apply to a computer after applying it for the first time ?

This is to prevent GPO tatooing which is a use case where some settings persists on the system even after disabling/unliking the GPO.

Thank you,

Improve this question
1
  • 1
    This is a good question, as it's something talked a lot, but the fact Microsoft is moving away from onprem to more Intune/Endpoint Manager policy make me think it's a problem sysadmin will die with it in the long term.
    – yagmoth555 ♦
    Commented Sep 4 at 13:57

1 Answer 1

Reset to default
0

No. A Group Policy can have many settings that are far beyond the reversible administrative template settings. There isn't a mechanism to reverse or undo these settings, or even know what settings may have been changed.

Improve this answer
2
  • I understand what you're saying, but in the case of a more generic GPO, such as a Hardening policy (CIS/Security Baselines etc.), a majority of the settings involved are registry keys. I'm surprised there isn't a way to take a snapshot of the system state and go back to it.
    – Segfault
    Commented Sep 5 at 8:49
  • @Segfault: there is a way to take a snapshot, but that is completely separate from Group Policy.
    – Greg Askew
    Commented Sep 5 at 11:36

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .