Software Deployment Question

Block any deployment of IE 11 Globally

01/15/2014 2186 views

Some of out core web apps are not compatible with IE 11. Can any updates to IE 11 be simply blocked globally on all platforms?

Answer Summary:
1 Comment   [ + ] Show comment


  • This content is currently hidden from public view.
    Reason: Removed by member request For more information, visit our FAQ's.
  • Thanks for the the heads up guys... Is the simplest way to set the K1000 to disable any update to IE11??? . We're still mostly a XP shop so it won't install. So, Win7 + make it a disabled install/update ?? Still a newbie on K1K for subscribed win7 + OS's ??

All Answers


This registry key will remove it from Windows Update:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Setup\11.0]

You can probably block the installer from running via Group Policy by using a Software Restriction Policy...

Answered 01/15/2014 by: jegolf
Red Belt


The typical blockers like registry and http://www.microsoft.com/en-us/download/details.aspx?id=40722 do not prevent users from installing; so if users have local admin rights, consider a Managed Uninstall of IE11 as a suppliment to the aforementioned methods. I typically also have a custom inventory rule to detect which version iexplore.exe is at, and a deployment of an alternative browser like Chrome which has an MSI available at https://www.google.com/intl/en/chrome/business/browser/


Hope that helps.

Answered 01/15/2014 by: cblake
Red Belt

  • >so if users have local admin rights
    Users simply do not require LAR. Take them away. Solved.
    • Some do :/ It's an unfortunate reality in some workplaces. In companies with accounting departments, too often we are dependent on meeting a bank's business rules or equipment, like a scanner, that may trigger UAC's. Wilcom embroidery and other programs like to trigger UAC's like crazy or when they need updating, and we simply don't want to make the trip or take the time for that.

      Off-site sales reps whose laptops we're responsible for are only in house or in reach of us every few months, and remote isn't always an option. A call at 9 pm to use logmein to allow UAC to install skype for the sales rep's use is a pain. one of the web meeting services (i believe cisco) asks for you to download/run the program every time, painful.

      Would never allowing the user to have the power to hurt themselves or their computer be the perfect world? Absolutely, but there must always be the consideration of what kind of bandwidth and tools an IT department has to support those customers.
      • take a look at privilege manager...at http://software.dell.com/products/desktop-authority-management-suite/#

        resources tab...

        elevates user privileges by app or self service...
This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ