Removing GPO - comprehensive list of 'tattooed and non tattooed' registre paramètres

[ForumBot]

Is there a comprehensive collection or perhaps even a 'quick guide' to which GPO settings (or registry keys) are protected from GPO 'tattooing'? I have a few clients who have horrendous GPO policies (not well named, some are added to default domain, etc) and in trying to clean things up, I want to ensure I don't break anything inadvertently.

Thanks!

[ForumBot]

The Group Policy editor will only show settings that do not "tattoo", by default (that is, entries that are made in either `HKLM\Software\Policies`, `HKLM\Software\Microsoft\Windows\CurrentVersion\Policies`, or the `HKCU` versions of the same). You have to alter the filter to display settings that are not "Managed" to see entries that are made outside those portions of the registry.

Settings made within those keys are removed when the policy no longer applies. Settings outside those keys *will* "tattoo" the registry.