Block Internet Explorer in Active Directory in a few clicks!
This is easily done in Active Directory following these simple steps:
Step 1
Make sure that you have a new browser installed on your Windows PC’s or located on a shared resource for install on your domain.
I’ve installed Google Chrome and Firefox for my users.
Step 2
Login to your Domain Controller with appropriate privledges
Step 3
Open Group Policy Management Editor
To open Group Policy Management, click Start, click Control Panel, click Administrative Tools, and then click Group Policy Management.
Alternatively you can get there these ways:
Press the Windows logo key + R to open the RUN dialog box. Type gpmc.msc in the text box, and then click OK or press ENTER.
Click Start, click All Programs, click Accessories, and then click Run. Type gpmc.msc in the text box, and then click OK or press ENTER.
Right Click your Domain Policy and click “EDIT”
Step 4
Navigate to User Configuration – Administrative Templates – System
Step 5
Open “Don’t run specified Windows Applications” and select ENABLED and add “iexplore.exe” to the list of disallowed application.
Save your policy and iexplore.exe (Internet Explorer) will be disabled on your domain!
Step 6
If you users have not rebooted their PC’s, you can open command prompt (CMD) and type “gpupdate /force”. This will force a Group Policy update on the machine and log the user off. Alternative is to reboot their PC.
Final step (If you want to disable Internet Explorer on the PC’s, even though the program will not run on your domain)
On WIN 7/8 Machines… Control Panel – Programs and Features – TURN WINDOWS FEATURES ON or OFF – UNCHECK Internet Explorer
On XP machines… Control Panel – Add / Remove Programs – TURN WINDOWS FEATURES ON or OFF – UNCHECK Internet Explorer