Some of out core web apps are not compatible with IE 11. Can any updates to IE 11 be simply blocked globally on all platforms?

Answer Summary:
Cancel
1 Comment   [ + ] Show Comment

Comments

  • This content is currently hidden from public view.
    Reason: Removed by member request
    For more information, visit our FAQ's.
  • Thanks for the the heads up guys... Is the simplest way to set the K1000 to disable any update to IE11??? . We're still mostly a XP shop so it won't install. So, Win7 + make it a disabled install/update ?? Still a newbie on K1K for subscribed win7 + OS's ??
Please log in to comment

Answers

1

This registry key will remove it from Windows Update:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Setup\11.0]
"DoNotAllowIE11"=dword:00000001

You can probably block the installer from running via Group Policy by using a Software Restriction Policy...

Answered 01/15/2014 by: jegolf
Red Belt

Please log in to comment
1

The typical blockers like registry and http://www.microsoft.com/en-us/download/details.aspx?id=40722 do not prevent users from installing; so if users have local admin rights, consider a Managed Uninstall of IE11 as a suppliment to the aforementioned methods. I typically also have a custom inventory rule to detect which version iexplore.exe is at, and a deployment of an alternative browser like Chrome which has an MSI available at https://www.google.com/intl/en/chrome/business/browser/

 

Hope that helps.

Answered 01/15/2014 by: cblake
Red Belt

  • >so if users have local admin rights
    Users simply do not require LAR. Take them away. Solved.
    • Some do :/ It's an unfortunate reality in some workplaces. In companies with accounting departments, too often we are dependent on meeting a bank's business rules or equipment, like a scanner, that may trigger UAC's. Wilcom embroidery and other programs like to trigger UAC's like crazy or when they need updating, and we simply don't want to make the trip or take the time for that.

      Off-site sales reps whose laptops we're responsible for are only in house or in reach of us every few months, and remote isn't always an option. A call at 9 pm to use logmein to allow UAC to install skype for the sales rep's use is a pain. one of the web meeting services (i believe cisco) asks for you to download/run the program every time, painful.

      Would never allowing the user to have the power to hurt themselves or their computer be the perfect world? Absolutely, but there must always be the consideration of what kind of bandwidth and tools an IT department has to support those customers.
      • take a look at privilege manager...at http://software.dell.com/products/desktop-authority-management-suite/#

        resources tab...

        elevates user privileges by app or self service...
Please log in to comment
Answer this question or Comment on this question for clarity

Share