Technical Anshu
Tutorials Blog
🏢 For IT Admins

Disable Snipping Tool on Every Office PC With Group Policy

One PC takes a minute. Two hundred PCs need policy. Group Policy is the administrator's route: set the rule once, every domain PC picks it up by itself, and if someone changes it locally, the policy quietly re-applies it. The video's one click script is the right tool for a handful of machines and home use - this page is for the fleet.

✍️ Technical Anshu🪟 Windows 10 / 11⏱️ 15 minute setup
🎥 Watch the one click script working live in the video - press 1, the tool is gone; press 2, it is back

The request in the video came from a user who wanted the Snipping Tool off across an entire company. Doing that with a script means touching every machine - and trusting that nothing ever changes it back. Group Policy solves both problems: the setting lives on the server, distribution is automatic, and the state is auditable, because a named GPO in a console is a record in a way a file copied to two hundred desktops is not. Start with one local machine, prove the behaviour, then go to the domain.

Local Group Policy Editor - the exact setting (example)
PathUser Configuration - Administrative Templates - Windows Components - Tablet PC - Accessories
PolicyDo not allow Snipping Tool to run
Set it toEnabled - tool blocked
Applies aftergpupdate /force or the next sign in
Home edition PCsNo gpedit - use the script or registry route

This is the same switch the script flips, delivered by policy. Enabled means the Snipping Tool will not run for the users the policy reaches.

1

Step One - Prove It in the Local Policy on a Single PC

  1. On a test PC, press Windows + R, type gpedit.msc and press Enter
  2. Open User Configuration > Administrative Templates > Windows Components > Tablet PC > Accessories
  3. Double-click Do not allow Snipping Tool to run and select Enabled
  4. Run gpupdate /force, sign in as a normal user, and try the Snipping Tool

Only move to the domain when this test behaves exactly as expected - including the undo, back to Not Configured.

2

Step Two - The Domain Way, a GPO Linked to an OU

On the server, open Group Policy Management and create a new GPO with a name a future admin will understand - something like Block Snipping Tool - Exam Labs beats Policy 14 every time. Edit it, set the same Do not allow Snipping Tool to run policy to Enabled, and link the GPO to the OU holding the people or rooms it should cover.

One design point worth knowing: this policy sits under User Configuration, so it follows users wherever they sign in. Link it where the users live. For fixed rooms - an exam lab where the machine matters more than the person - that is exactly what loopback processing exists for; use it deliberately, not by accident.

3

Step Three - Scope It With Security Filtering

A company-wide block is usually wider than the real requirement. Use the GPO's security filtering so the policy lands only on the groups that need it - the exam students, the data-entry team, the client-project desks - and not on IT support, who need screenshots to do their jobs. Scoped properly, a teacher and a student can sign in to the same model of PC and get different results, because the policy follows the group, not the hardware.

4

Step Four - Roll Out in Rings, Not All at Once

Screenshots are a genuine work habit, and removing a tool overnight with no warning generates tickets, not security. Roll out like any other change: first your own desk and one friendly user, then one department, then the full scope. Give people a short notice and a sanctioned alternative for the captures they legitimately need - a sentence in the rollout mail saves a week of grumbling. The technical change is one setting; the rollout is the actual work.

5

The Honest Options for Home Edition and Non-Domain PCs

Group Policy has edges, and pretending otherwise helps nobody. Windows Home edition has no Group Policy Editor at all, and personal or workgroup laptops never hear a domain GPO. For those machines the honest tools are the ones from the video: the one click script per machine, or the same DisableSnippingTool registry value pushed through whatever management tool you do have - several RMM platforms can run a one-line reg add across a fleet. The result on the PC is identical; only the delivery differs.

🔴 Why policy is the honest fleet method: it is visible, named and reversible from one console. A silent script copied onto every PC is not management - it is a surprise waiting for the next admin. And keep the limit in view while you deploy: this blocks one app. Print Screen, Game Bar, third-party tools and phone cameras remain open, so write the policy as the hygiene rule it is, not as a data-leak cure.

🎥 See the One Click Script in the Video

For a single PC the video's script is quicker - watch it, then decide which machines deserve policy instead.

▶️ Watch Full Video
❓ Common Questions (FAQ)

How long does the policy take to reach every PC?

Domain PCs refresh Group Policy roughly every 90 minutes and again at sign in. While testing, run gpupdate /force on the PC to apply it immediately.

Can I block it only for students but not for teachers?

Yes. Use security filtering on the GPO so it applies to the student group only, or link separate GPOs to the OUs where each group sits. Teachers keep the tool; students are blocked.

Staff still need screenshots for support tickets. Is there a middle way?

Yes - scope the block to the rooms and groups that need it, and leave support and IT groups outside the filtering. The policy follows the scope you give it, so a total ban is a choice, not a requirement.

This guide is based on the Technical Anshu Snipping Tool disable video • Stuck on any step? Ask in the video comments — you will get an answer 🙏