Block any deployment of IE 11 Globally
Some of out core web apps are not compatible with IE 11. Can any updates to IE 11 be simply blocked globally on all platforms?
-
Thanks for the the heads up guys... Is the simplest way to set the K1000 to disable any update to IE11??? . We're still mostly a XP shop so it won't install. So, Win7 + make it a disabled install/update ?? Still a newbie on K1K for subscribed win7 + OS's ?? - mk357 10 years ago
Answers (2)
This registry key will remove it from Windows Update:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Setup\11.0]
"DoNotAllowIE11"=dword:00000001
You can probably block the installer from running via Group Policy by using a Software Restriction Policy...
The typical blockers like registry and http://www.microsoft.com/en-us/download/details.aspx?id=40722 do not prevent users from installing; so if users have local admin rights, consider a Managed Uninstall of IE11 as a suppliment to the aforementioned methods. I typically also have a custom inventory rule to detect which version iexplore.exe is at, and a deployment of an alternative browser like Chrome which has an MSI available at https://www.google.com/intl/en/chrome/business/browser/
Hope that helps.
Comments:
-
>so if users have local admin rights
Users simply do not require LAR. Take them away. Solved. - anonymous_9363 10 years ago-
Some do :/ It's an unfortunate reality in some workplaces. In companies with accounting departments, too often we are dependent on meeting a bank's business rules or equipment, like a scanner, that may trigger UAC's. Wilcom embroidery and other programs like to trigger UAC's like crazy or when they need updating, and we simply don't want to make the trip or take the time for that.
Off-site sales reps whose laptops we're responsible for are only in house or in reach of us every few months, and remote isn't always an option. A call at 9 pm to use logmein to allow UAC to install skype for the sales rep's use is a pain. one of the web meeting services (i believe cisco) asks for you to download/run the program every time, painful.
Would never allowing the user to have the power to hurt themselves or their computer be the perfect world? Absolutely, but there must always be the consideration of what kind of bandwidth and tools an IT department has to support those customers. - Wildwolfay 10 years ago-
take a look at privilege manager...at http://software.dell.com/products/desktop-authority-management-suite/#
resources tab...
elevates user privileges by app or self service... - hmoore 10 years ago
