Using Group Policy to Disable Show Hidden Files

There are thousands of hidden files on your workstation that were installed with your applications and operating system that you probably are not aware exist. Deleting these hidden files could be catastrophic, so keeping these files safe and hidden is important. If you discover certain hidden files and attempt to delete or alter them, there could be a number of unforeseen consequences for the operating system and applications, including data loss and completely crashing the system.

To safeguard against such a system crash, be certain hidden files are in fact hidden. In a domain environment it is best to use group policy to disable showing hidden files to quickly ensure all workstations comply with this policy.

How to Configure Group Policy to Disable Show Hidden Files

Open Group Policy Management from Administrative Tools under the Start Menu
Right-click the domain or organizational unit where you would like to apply the OU.
Select Create a GPO in this domain, and Link it here…
Name the New GPO and click OK
Right-click the new GPO and choose Edit
Using the Group Policy Management Editor click to expand User Configuration >Preferences > Control Panel Settings > Folder Options
Right-click Folder Options and select New > Folder Options (Windows Vista and later)
Click the radio button Do not show hidden files and folders and click OK
Close the Group Policy Editor and test

Testing your new GPO

To test this GPO, you will need to bypass it by setting the folder options on the workstation.

From a workstation open the Control Panel and select Folder Options
In Folder Options Click the View Tab, Click the radio button to Show hidden files, folders and drives and click Apply
Create a new text document on the desktop
Right-click that new document, select properties and check the box to mark the document hidden
Click Apply
Hold the Window + r keys and type cmd.exe in the run dialog box.
In the command line window that opens type gpupdate /force

After this commands runs the workstation will apply the Group Policy settings from the domain controller. Once this happens the file you created on the desktop should disappear.

Although a user can manually show hidden files it is rare that one will have any desire or reason to do so. If a user does manually circumvent the GPO it will reapply each time the user logs in or reboots the workstation. You can also manually force the update by running gpupdate /force from the command line.

Creating the new GPO should keep all of your hidden files safe from users who might try to delete them preventing data loss and crashed applications or workstations.