Windows 11 - How to permanently disable temporary IPv6 address

Barungar 15

Hi,

I need some hints or help. I've tried to permanently disable the use of IPv6 temporary addresses on my Windows 11 computer. Both methods I tried only work for the next system start. With following starts having those IPv6 temporary address being enabled again.

Using PowerShell I tried:

Set-NetIPv6Protocol -UseTemporaryAddresses Disable

Using CMD with netsh I tried:

netsh interface ipv6 set privacy state=disabled store=persistent

The PowerShell or CMD were run with elevated (admin) rights. None returned an error. Sadly the result stays the same. After rebooting temporary IPv6 addresses are disabled. With the following reboot they are back again.

How do I get a persistent / permanent removal of IPv6 temporary addresses?

Thanks,

Barungar

Roland Schweiger 10 Reputation points

2024-08-02T09:19:21.63+00:00

Windows11 23H2 - UNABLE to permanently prevent LAN adapter from getting random- and temporary ip v6 adresses - please help

My setup: typical Windows11 PC, all updates. Connected with Ethernet Adapter to FritzBox Router The router gives me a true ipv4 address + an ipv6 subnet As i want to be reachable from outside on ONE SINGLE IPV6 address (which i also configure for a dyndns service) i do not want privacy extensions and temporary ipv6 addresses which also seem to "change" the mac address of my network adapter. So my typical adapter looks like this Ethernet-Adapter Ethernet: Verbindungsspezifisches DNS-Suffix: fritz.box IPv6-Adresse. . . . . . . . . . . : 2001:871:25e:e7d2:e567:d425:c123:b638 Temporäre IPv6-Adresse. . . . . . : 2001:871:25e:e7d2:102c:1aea:4b4c:b244 Verbindungslokale IPv6-Adresse . : fe80::73a6:732d:be52:e5e4%17 IPv4-Adresse . . . . . . . . . . : 192.168.180.20 Subnetzmaske . . . . . . . . . . : 255.255.255.0 Standardgateway . . . . . . . . . : fe80::d624:ddff:fe29:18b3%17 192.168.180.1 Sorry it's in German but you can see what i mean. TRIED EVERYTHING i found on the onternet. all the netsh commands netsh interface ipv6 set global randomizeidentifiers=disabled store=active netsh interface ipv6 set global randomizeidentifiers=disabled store=persistent netsh interface ipv6 set privacy state=disabled store=active netsh interface ipv6 set privacy state=disabled store=persistent and the power shell commands Set-NetIPv6Protocol -RandomizeIdentifiers Disabled Set-NetIPv6Protocol -UseTemporaryAddresses Disabled and resetting netsh winsock reset netsh int ip reset ipconfig /release it used to work for a while and i only got one ipv6 address with always the same prefix and suffix. At some windows update or something this must have changed. Once i had installed Wireguard for a vpn, then uninstalled it again and i am wondering if this might have also caused the problem. sometimes a vEthernet switch keeps appearing too, but i have no Hyper-V installed. Please does someone know how to for ever get rid of the ipv6 privacy extensions + temporary addresses? also tried disabling router discovery with netsh interface ipv6 set interface "Ethernet" routerdiscovery=disabled but then the DNS won't work either... have pulled all my hair out in the meantime i really am at the end of any knowledge. nice greetings from Vienna Roland Schweiger
Roland Schweiger 10 Reputation points

2024-08-02T20:35:06.6166667+00:00

what i found so far - after EVERY reboot of the pc, when looking into power shell, the

RandomizeIdentifiers is set to ENABLED.

i can disable it but this does not persist.

Why not? This seems to be the problem. How can this be solved?
Roland Schweiger 10 Reputation points

2024-08-11T17:32:45.97+00:00

thanks for the reply, unfortunately does not work for me. The only commands that work are the 2 powershell commands:

Set-NetIPv6Protocol -RandomizeIdentifiers Disabled

Set-NetIPv6Protocol -UseTemporaryAddresses Disabled

but they only work for the current session. After every reboot, privacy-extensions are enabled again and i get random temporary ipv6 addresses.

This is driving me bananas .....

Also tried enabling the true "Administrator" account in windows11 and entering all the commands there, no luck ...

but thanks for the help anyway.

6 answers

Voon Kim Heng 10 Reputation points

2023-07-09T15:49:12.9166667+00:00

Hi All, I used the command below to disable my Notebook's temporary IPv6 address.

netsh interface ipv6 set global randomizeidentifiers=disabled

netsh interface ipv6 set privacy state=disabled

To disable Teredo tunneling

netsh interface teredo set state disabled

https://lonesysadmin.net/2018/01/23/disable-windows-ipv6-temporary-addresses/
Please sign in to rate this answer.

1 person found this answer helpful.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Deleted

This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
1 deleted comment

Comments have been turned off. Learn more
Deleted

This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
2 deleted comments

Comments have been turned off. Learn more
Jørgen Lanesskog 0 Reputation points

2024-08-10T15:19:48.94+00:00

Seems like you have to first disable the active store and then the persistent store.
This worked for me and have worked accross multiple reboots.

netsh interface ipv6 set global randomizeidentifiers=disabled store=active

netsh interface ipv6 set privacy state=disabled store=active

netsh interface ipv6 set global randomizeidentifiers=disabled store=persistent

netsh interface ipv6 set privacy state=disabled store=persistent

netsh interface teredo set state disabled

Also, if you have a static IP configured and want to disable SLAAC:

netsh interface ipv6 set interface "Lanesskog" routerdiscovery=disabled store=active

netsh interface ipv6 set interface "Lanesskog" routerdiscovery=disabled store=persistent
Please sign in to rate this answer.
Markus Kuhn 5 Reputation points

2024-08-16T11:33:13.4+00:00

Sadly, this did not work for me on Windows 11 23H2. I ran in cmd.exe as administrator

C:/>netsh interface ipv6 set global randomizeidentifiers=disabled store=active

C:/>netsh interface ipv6 set global randomizeidentifiers=disabled store=persistent

in order to get an EUI-64 based permanent IPv6 address. The change did work instantly, but sadly this change did not survive the next reboot. :-(

Roland Schweiger 10 Reputation points

2024-08-16T17:32:21+00:00

same here see my other postings. The NETSH commands and the powershell-commands only work until the next reboot. And after the next reboot i must issue the commands, THEN UNPLUG NETWORK CABLE then issue ipconfig /release, ipconfig /flushdns, ipconfig /renew, then re-plug network cable to get rid of the temporary address......... This is driving me bananas! I need my single ipv6 address with its remaining suffix because that address is made reachable in my router (in the FritzBox one can declare a device as "exposed ipv6 host" which makes the address reachable) and i also update a dynDNS service so i always know my address even if the internet-provider changes the whole address + subnet.
I also posted this in the Microsoft Windows Feedback HUB 2 days ago, no response until now.

As i said it drives me mad and it is sad because what i am doing is exactly what makes ipv6 so useful --- naimly being able to reach a machine, a service or program etc. In my case i use the incoming connections for remote desktop, for controlling a window awning, for controlling my distributed calculating projects.
Please SOMEBODY AT MICROSOFT listen and fix this ..... or please some network admin who also was driven mad and has found a workaround, please help.

many tnx in advance, greetings from Vienna

Roland Schweiger

Roland Schweiger 10 Reputation points

2024-09-29T07:28:45.9266667+00:00

it appears that MS has fixed the problem after one of the recent updates, unfortunately i cannot tell which one it might have been. But now on my Windows 11 machine with Ethernet internet connected to a router, i finally get only one true ipv6 address which works fine and can be propagated via dynDNS. No more temporary ipv6 addresses and no more random addresses after booting.

What i last did 2 days ago:

entered all these commands into an POWERSHELL session with elevated rights:

Set-NetIPv6Protocol -RandomizeIdentifiers Disabled

Set-NetIPv6Protocol -UseTemporaryAddresses Disabled

netsh interface ipv6 set privacy state=disabled store=active

netsh interface ipv6 set privacy state=disabled store=persistent

netsh interface ipv6 set global randomizeidentifiers=disabled store=active

netsh interface ipv6 set global randomizeidentifiers=disabled store=persistent

i did it in this exact order, don't know if this gives any influence. But finally everything works again and the settings do remain after reboot. Maybe this helps others.

greetings, from Roland
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Markus Kuhn 5 Reputation points

2024-12-17T13:08:00.1233333+00:00
As a workaround, try running the command in “Safe Mode with Networking”, then reboot. That worked on two out of the two Windows 11 Pro machines (e.g. 24H2, build 26100.2605) with that problem that we tried.

Detailed steps:

On the logon screen click the Power symbol, then click Shift+Reset. After the reboot select Troubleshoot, Advanced options, Startup Settings, select "5) Enable Safe Mode with Networking".

While in "Safe Mode with Networking" run in admin-elevated cmd.exe the netsh command C:\>netsh interface ipv6 set global randomizeidentifiers=disabled store=persistent

Reboot back into normal mode

Check with netsh interface ipv6 show global that the setting has persisted.

It appears that whatever mechanism prevented that setting from becoming persistent is not active in Safe Mode.
Please sign in to rate this answer.
Markus Kuhn 5 Reputation points

2024-12-17T17:52:39.0766667+00:00

Sadly the effect only persisted for a few reboots, and the next day randomized identifiers were mysteriously enabled again.

Does anyone know where this persistent state is meant to be stored? Some registry entry or some configuration where where one could enable auditing in the ACL. to see which process request write access?
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Windows 11 - How to permanently disable temporary IPv6 address

6 answers

Your answer