en-US windows user

Restrict Internet communication

Verified with Windows 11 25H2 — updated on July 30, 2026

Windows 11 25H2

Supported on: At least Windows XP Professional with SP2

Path in the GPO console

User Configuration\Administrative Templates\System\Internet Communication Management

Description

This policy setting specifies whether Windows can access the Internet to accomplish tasks that require Internet resources. If you enable this setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features cannot access the Internet. If you disable this policy setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features can access the Internet. If you do not configure this policy setting, all of the the policy settings in the "Internet Communication settings" section are set to not configured.

Registry

HKCU Software\Policies\Microsoft\InternetManagement

Value name: RestrictCommunication

Enabled: RestrictCommunication = 1

Disabled: RestrictCommunication = 0

This policy sets several registry values:

NoPublishingWizard Explorer
Enabled: NoPublishingWizard = 1
Disabled: NoPublishingWizard = 0
NoWebServices Explorer
Enabled: NoWebServices = 1
Disabled: NoWebServices = 0
NoGenTicket Software Protection Platform
Enabled: NoGenTicket = 1
Disabled: NoGenTicket = 0
AllowWindowsEntitlementReactivation Software Protection Platform
Enabled: AllowWindowsEntitlementReactivation = 1
Disabled: AllowWindowsEntitlementReactivation = 0
NoOnlinePrintsWizard Explorer
Enabled: NoOnlinePrintsWizard = 1
Disabled: NoOnlinePrintsWizard = 0
CEIP Client
Enabled: CEIP = 2
Disabled: CEIP = 1
NoInternetOpenWith Explorer
Enabled: NoInternetOpenWith = 1
Disabled: NoInternetOpenWith = 0
DisableHTTPPrinting Printers
Enabled: DisableHTTPPrinting = 1
Disabled: DisableHTTPPrinting = 0
DisableWebPnPDownload Printers
Enabled: DisableWebPnPDownload = 1
Disabled: DisableWebPnPDownload = 0
PreventHandwritingErrorReports HandwritingErrorReports
Enabled: PreventHandwritingErrorReports = 1
Disabled: PreventHandwritingErrorReports = 0
PreventHandwritingDataSharing TabletPC
Enabled: PreventHandwritingDataSharing = 1
Disabled: PreventHandwritingDataSharing = 0
NoOnlineAssist 1.0
Enabled: NoOnlineAssist = 1
Disabled: NoOnlineAssist = 0
NoExplicitFeedback 1.0
Enabled: NoExplicitFeedback = 1
Disabled: NoExplicitFeedback = 0
NoImplicitFeedback 1.0
Enabled: NoImplicitFeedback = 1
Disabled: NoImplicitFeedback = 0
WebHelp WindowsMovieMaker
Enabled: WebHelp = 1
Disabled: WebHelp = 0
CodecDownload WindowsMovieMaker
Enabled: CodecDownload = 1
Disabled: CodecDownload = 0
WebPublish WindowsMovieMaker
Enabled: WebPublish = 1
Disabled: WebPublish = 0

MDM / Intune (CSP)

./User/Vendor/MSFT/Policy/Config/ADMX_ICM/InternetManagement_RestrictCommunication_1
User Since Windows 10, version 2004 with KB5005101 [10.0.19041.1202] and later | Windows 10, version 20H2 with KB5005101 [10.0.19042.1202] and later | Windows 10, version 21H1 with KB5005101 [10.0.19043.1202] and later | Windows 11, version 21H2 [10.0.22000] and later Official mapping (Microsoft Learn)

Microsoft Learn documentation Mapping data: Microsoft Learn (CC BY 4.0)

Export Builder

BETA

Configure the state, scope and options, then generate .reg, PowerShell, Intune and SCCM outputs — or add the setting to a multi-setting collection.

These exports write the registry — this is not a managed GPO.

.reg file

Windows Registry Editor Version 5.00

; Exported from gporais.com
; Policy: Restrict Internet communication
; State: Enabled
; Supported on: At least Windows XP Professional with SP2

[HKEY_CURRENT_USER\Software\Policies\Microsoft\InternetManagement]
"RestrictCommunication"=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoPublishingWizard"=dword:00000001
"NoWebServices"=dword:00000001
"NoOnlinePrintsWizard"=dword:00000001
"NoInternetOpenWith"=dword:00000001

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows NT\CurrentVersion\Software Protection Platform]
"NoGenTicket"=dword:00000001
"AllowWindowsEntitlementReactivation"=dword:00000001

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Messenger\Client]
"CEIP"=dword:00000002

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows NT\Printers]
"DisableHTTPPrinting"=dword:00000001
"DisableWebPnPDownload"=dword:00000001

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\HandwritingErrorReports]
"PreventHandwritingErrorReports"=dword:00000001

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\TabletPC]
"PreventHandwritingDataSharing"=dword:00000001

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Assistance\Client\1.0]
"NoOnlineAssist"=dword:00000001
"NoExplicitFeedback"=dword:00000001
"NoImplicitFeedback"=dword:00000001

[HKEY_CURRENT_USER\Software\Policies\Microsoft\WindowsMovieMaker]
"WebHelp"=dword:00000001
"CodecDownload"=dword:00000001
"WebPublish"=dword:00000001
More formats (PowerShell, Intune, SCCM)

PowerShell

# Exported from gporais.com
# Policy: Restrict Internet communication
# State: Enabled
# Supported on: At least Windows XP Professional with SP2
# Warning: In SYSTEM context (the Intune default), HKCU targets the SYSTEM profile. Run this script using the logged-on credentials.

$path = 'HKCU:\Software\Policies\Microsoft\InternetManagement'
New-Item -Path $path -Force | Out-Null
Set-ItemProperty -Path $path -Name 'RestrictCommunication' -Value 1 -Type DWord

$path = 'HKCU:\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer'
New-Item -Path $path -Force | Out-Null
Set-ItemProperty -Path $path -Name 'NoPublishingWizard' -Value 1 -Type DWord
Set-ItemProperty -Path $path -Name 'NoWebServices' -Value 1 -Type DWord
Set-ItemProperty -Path $path -Name 'NoOnlinePrintsWizard' -Value 1 -Type DWord
Set-ItemProperty -Path $path -Name 'NoInternetOpenWith' -Value 1 -Type DWord

$path = 'HKCU:\Software\Policies\Microsoft\Windows NT\CurrentVersion\Software Protection Platform'
New-Item -Path $path -Force | Out-Null
Set-ItemProperty -Path $path -Name 'NoGenTicket' -Value 1 -Type DWord
Set-ItemProperty -Path $path -Name 'AllowWindowsEntitlementReactivation' -Value 1 -Type DWord

$path = 'HKCU:\Software\Policies\Microsoft\Messenger\Client'
New-Item -Path $path -Force | Out-Null
Set-ItemProperty -Path $path -Name 'CEIP' -Value 2 -Type DWord

$path = 'HKCU:\Software\Policies\Microsoft\Windows NT\Printers'
New-Item -Path $path -Force | Out-Null
Set-ItemProperty -Path $path -Name 'DisableHTTPPrinting' -Value 1 -Type DWord
Set-ItemProperty -Path $path -Name 'DisableWebPnPDownload' -Value 1 -Type DWord

$path = 'HKCU:\Software\Policies\Microsoft\Windows\HandwritingErrorReports'
New-Item -Path $path -Force | Out-Null
Set-ItemProperty -Path $path -Name 'PreventHandwritingErrorReports' -Value 1 -Type DWord

$path = 'HKCU:\Software\Policies\Microsoft\Windows\TabletPC'
New-Item -Path $path -Force | Out-Null
Set-ItemProperty -Path $path -Name 'PreventHandwritingDataSharing' -Value 1 -Type DWord

$path = 'HKCU:\Software\Policies\Microsoft\Assistance\Client\1.0'
New-Item -Path $path -Force | Out-Null
Set-ItemProperty -Path $path -Name 'NoOnlineAssist' -Value 1 -Type DWord
Set-ItemProperty -Path $path -Name 'NoExplicitFeedback' -Value 1 -Type DWord
Set-ItemProperty -Path $path -Name 'NoImplicitFeedback' -Value 1 -Type DWord

$path = 'HKCU:\Software\Policies\Microsoft\WindowsMovieMaker'
New-Item -Path $path -Force | Out-Null
Set-ItemProperty -Path $path -Name 'WebHelp' -Value 1 -Type DWord
Set-ItemProperty -Path $path -Name 'CodecDownload' -Value 1 -Type DWord
Set-ItemProperty -Path $path -Name 'WebPublish' -Value 1 -Type DWord

Building a multi-setting collection? Add this setting and generate combined .reg / PowerShell / GPO scripts.

Open the Builder

Embed this policy on your site

What to embed
Theme

Adds one script line: the theme follows your site’s appearance and the height fits the content. If your site blocks scripts, the embed follows the visitor’s system theme.

Preview