none
restrict to open Internet explorer RRS feed

All replies

  • Hi, 

    I think that you can try and use Software Restriction Policies (SRP) and deny access to "Program Files\Internet Explorer\iexplore.exe" to restrict IE. 

    Also if you have Win2008 R2 as a DC and all of your clients have Win7, then you can use the new feature that is similar to SRP but much better and it is called AppLocker, which can also be found on the list the other Group Policy Settings:

    On a Windows 7 Client go to:
    Group Policy Editor ("Start", in the search field enter "gpedit.msc") -> Computer Configuration -> Windows Settings -> Security Setings -> AppLocker.

    Just be adviced that if you use SRP first and then you apply some policies with the AppLocker then the AppLocker settings will take precedence and will override any settings that were defined through SRP and all of the SRP settings will be instantly disabled.

    You can find more info about the new AppLocker feature on this two links:
    http://technet.microsoft.com/en-us/windows/dd320283
    http://technet.microsoft.com/en-us/windows/dd320283


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Wednesday, June 28, 2017 9:21 AM
    Moderator