Disable system protection and system restore in Windows 7 by Group Policy

Assuming the domain controller is installed Windows Server 2008 R2.

1. At Domain Controller, log in as Domain Administrator.
2. Launch "Group Policy Management Console".
3. Right-click a group policy which is assigned to the workstations, select "Edit".
4. Expand "Computer Configuration > Policies > Administrative Templates > System > System Restore".
5. At right pane, double-click "Turn off Configuration".
6. Select "Enabled".


7. Click "OK".
8. Double-click "Turn off System Restore".
9. Select "Enabled".


10. Click "OK".
11. At a workstation which updated the Group Policy, log in as administrator.
12. Launch "System Properties", select "System Protection" tab.


Because the system protection was turned on, the protection of protection settings is ON. This setting can be modified by registry.

13. Back to Group Policy Management Editor of Domain Controller, expand "Preferences > Windows Settings > Registry".
14. Right-click "Registry", select "Registry Wizard".


15. Select Local Computer.
16. Navigate to "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SPP"



17. Select "Clients"
18. Click "Ok"


19. Expand newly created "Registry Wizard".



20. Open Clients and select action as "Delete".

21. Enforce group policy on client computer using command "gpupdate /force".




As a result, the protection settings is OFF.