How to set Group Policy "Turn Off Automatic Root Certificates Update" vie Registry/Powershell?

powershell windows-7 registry group-policy
Erik picture Erik · Jul 4, 2013 · Viewed 23.1k times · Source

I need to disable the following group policy in Windows 7 programatically, for example by modifying a registry key using Powershell:

"Turn Off Automatic Root Certificates Update"

Does anybody know which registry key needs to be set or unset in order to make this work?

Answer

JoshHetland picture JoshHetland · Feb 19, 2014

I had a similar issue when i was creating an application that communicated with a server over HTTPS using two-way SSL.

This was causing a delay of a full minute when the initial request was made

It ran in WinPE where hand clicking through the local group policy editor was not an option. There also is no way I am aware of to register a root authority in this environment and it is running in an incredibly restricted environment so it can not access windows update (not that it would find our corporate CA there anyway).

The registry value you are looking for is

HKLM\Software\Policies\Microsoft\SystemCertificates\AuthRoot

DWORD DisableRootAutoUpdate = 1

Source: http://www.group-policy.com/ref/policy/452/Turn_off_Automatic_Root_Certificates_Update

Related questions

How to recursively delete an entire directory with PowerShell 2.0?

What is the simplest way to forcefully delete a directory and all its subdirectories in PowerShell? I am using PowerShell V2 in Windows 7. I have learned from several sources that the most obvious command, Remove-Item $targetDir -Recurse -Force, does not …

Read More
Multiple -and -or in PowerShell Where-Object statement

PS H:\> Invoke-Command -computername SERVERNAME { Get-ChildItem -path E:\dfsroots\datastore2\public} | Where-Object {{ $_.e xtension-match "xls" -or $_.extension-match "xlk" } -and { $_.creationtime -ge "06/01/2014"}} Above is my code example. I'm trying to remotely run this PowerShell code on my file server and …

Read More
PowerShell on Windows 7: Set-ExecutionPolicy for regular users

I want to run PowerShell scripts on Windows 7 as a regular user. Whenever I try, I get the following error: File C:\Users\danv\Documents\WindowsPowerShell\profile.ps1 cannot be loaded because the execution of scripts is disabled on this …

Read More