Local Group Policy - Reset to Default

How to Reset Local Group Policy to Default in Vista, Windows 7, and Windows 8​

   Information

This will show you how to reset all policy objects in the Local Group Policy Editor (gpedit.msc), including any custom GPOs for specific users/groups or all users except administrators, back to default in Vista, Windows 7, and Windows 8.

This will also only reset registry entries for policies that had been changed in the Local Group Policy Editor (gpedit.msc) itself to default, and not those changed using a REG file, manually in Registry Editor, or any other means.

This will not reset local security policies (secpol.msc)

   Note

This could be handy if you lost track of what changes you made in the Local Group Policy Editor, and just wanted to reset it back to default.

   Warning

The Local Group Policy Editor is only available in:

• Vista Business, Ultimate, and Enterprise editions.
• Windows 7 Professional, Ultimate, and Enterprise editions.
• Windows 8 Pro and Enterprise editions.

OPTION ONE

To Reset "Local Group Policy" to Default using a VBS File

NOTE: You must be logged in as an administrator in Windows to be able to do this option.
1. Click/tap on the Download button below to download the VBScript file below, then run it.
Reset_Local_Group_Policy.vbs


Download


2. If prompted, click/tap on Open.
NOTE: If you like, you can stop getting the Run prompt by unblocking the downloaded .vbs file.

3. If prompted by UAC, then click/tap on Yes (Windows 7/8) or Continue (Vista).

4. The Local Group Policy Editor has now been reset back to default.

OPTION TWO

To Reset "Local Group Policy" to Default using a BAT File

NOTE: You must be logged in as an administrator in Windows to be able to do this option.
1. Click/tap on the Download button below to download the batch file below.
Reset_Local_Group_Policy.bat


Download


2. Right click on the downloaded .bat file, and click/tap on Run as administrator.

3. If prompted, click/tap on Run.
NOTE: If you like, you can stop getting the Run prompt by unblocking the downloaded .bat file.

4. If prompted by UAC, then click/tap on Yes (Windows 7/8) or Continue (Vista).

5. The Local Group Policy Editor has now been reset back to default.

OPTION THREE

To Reset "Local Group Policy" to Default in a Command Prompt at Boot

1. Open a command prompt at boot in Vista or Windows 7 or Windows 8.
NOTE: See OPTION ONE at this link for how if needed.

2. In the command prompt, type diskpart, and press Enter. (see screenshot below step 7)

3. In the command prompt, type list volume, and press Enter. (see screenshot below step 7)

4. Make note of what your Windows OS drive letter is. It is not always C: at boot. (see screenshot below step 7)
NOTE: Mine just happens to be D: at boot.

5. In the command prompt, type exit, and press Enter. (see screenshot below step 7)

6. In the command prompt, type the command below, and press Enter. (see screenshot below step 7)
NOTE: Substitute D in the command below with your drive letter from step 4 instead.
RD /S /Q "D:\Windows\System32\GroupPolicy"
7. In the command prompt, type the command below, and press Enter. (see screenshot below)
NOTE: Substitute D in the command below with your drive letter from step 4 instead.
RD /S /Q "D:\Windows\System32\GroupPolicyUsers"


8. Restart the computer back into Windows.

9. The Local Group Policy Editor has now been reset back to default.
That's it,
Shawn

Related Tutorials

---

• How to Open the Local Group Policy Editor in Windows 7
• How to Open the Local Group Policy Editor in Vista
• How to Back Up and Restore Local Group Policy in Windows
• How to Apply Local Group Policies to a Specific User or Group in Vista and Windows 7
• How to Apply Local Group Policies to All Users Except Administrators
• How to Add Local Group Policy Editor to the Windows 7 Control Panel
• How to Quickly View Enabled Group Policies in Windows

 

[Dinesh]

Hi Shawn, great tutorial. Would it also delete all restrictions and preferences set using the administrator account?
For ex, if i have set some restrictions for local users using my administrator account, will it delete all of them?

 

[Brink]

Hello Dinesh,

It will only reset everything that was set from inside any Local Group Policy Editor itself back to default. This includes from within the normal gpedit.msc and any custom group policy mmc.exe for specific users and/or groups.

 

[sali147]

hi brink,i read ur tutorial about gp reset with cmd commands,in fact we delete two folders that located in "windows\system32\Group policy & Group policy users" by these commands.but now i have a question, i use win 7 ultimate 32bit,i change the policy for log on message by editing computer config\windows setting\security setting\local policies\security options\interactive logon: message text ... but now i wanna to reset my gp to the default,i use the cmd commands and even i delete above folders but it resets other policies to default except this one...can u help me?!!! 10x

 

[Brink]

Hello Sali,

This will only reset the local group policies (gpedit.msc), and not the local security policies (secpol.msc).

For security policies, you might see if this may help.

How do I restore security settings to a known working state?

 

[sali147]

u r right...it wont effect sec policies.
special thanks brink for this gr8 tip

 

[Brink]

You're welcome. I hope the other link may help.

 

[Hell Bomb]

Will the batch files work on computer not running windows 7 Professional or Ultimate

 

[Brink]

Hello Tom,

Unfortunately, no. The BAT files only resets what has been changed through the Local Group Policy Editor itself, and not by any other means (ex: registry).

 

[itech]

Reset Group Policy

I didn't see any way to deal with permissions in your downloads. I tried both the .vbs and .bat versions and received "access denied" messages!
itech

 

[Brink]

Hello itech, and welcome to Seven Forums.

Were you logged in to an administrator account when trying to use them?

Have you already tried Option Three?

 

[itech]

ACL

It was option 3 that resulted in the access denied msg. I had started Windows by using the F8 boot menu "command prompt" only option. That apparently does not automatically do an Administrator login. I was able to delete both files by opening a run as admin command prompt after starting Windows normally (I was also logged in as Administrator.)

 

[Brink]

Glad to hear that you got them deleted.

 

[jhkrischel]

Silly question - how do you get this to work if "windows\system32\GroupPolicy & GroupPolicyUsers" have both been deleted?

 

[Brink]

Hello Jh, and welcome to Seven Forums.

That's basically how the tutorial works to reset Group Policy. It deletes those two folders, then you restart the computer to apply. Whenever a group policy is set next, the folders will get recreated.

 

[Leonidas441]

This was vary useful !

 

[askic]

Hello,

is it possible to make a backup of the current GPO and then, if needed restore it back later?
I have found scripts, but it seems that they are applicable to the windows 8 and newer OS.
I have made a test changed GPO not to allow USB drives and executed backup vbs script and indeed it created the backup folder on my desktop.
However after executing reset script as expected USB storage was allowed on windows machine.After restore script, original GPO is not restored i.e I can freely use USB sticks.

Thank you in advance!

 

[Brink]

Hello askic,

The method in the tutorial below should work in Windows 7 as well. Note that it will only backup and restore policies set in the Local Group Policy Editor, and not any set manually in the registry. If the restore policies are not being enforced, then you might see if restarting the computer may help.

:ar: Local Group Policy - Backup and Restore in Windows

 

[askic]

Hello askic,

The method in the tutorial below should work in Windows 7 as well. Note that it will only backup and restore policies set in the Local Group Policy Editor, and not any set manually in the registry. If the restore policies are not being enforced, then you might see if restarting the computer may help.

:ar: Local Group Policy - Backup and Restore in Windows

Hello Brink,
I have downloaded three VBS scripts on my desktop: Backup_Local_Group_Policy, Restore_Local_Group_Policy and Reset_Local_Group_Policy.
I have made a change in GPO in Administrative Templates and disabled USB access. Then I executed Backup script and I saw new Backup Folder on my Desktop.
I tried to use USB and couldn't. After that I executed Reset script and that worked. I could use USB stick.
Finally I executed Restore script and receive message in CMD windows that the Computer policy was updated successfully. After open gpedit.msc I can see that indeed Removable access is "Enabled", so Backup script indeed restore settings, BUT I can still use USB stick and external USB drive as well.

Don't know how to explain that. I use win 7 pro. I have made the following changes in Admin Templates in GPO.

 

[Brink]

Restart the computer to see if that may apply the restored policy.