none
How to disable Internet access only for Internet Explorer

    Question

  • Hi,

    How end of support for Internet Explorer(8,9,10) is near, is there a way to disable IE internet access, but remain enabled for other browsers (e.g Chrome, Firefox, etc).
    IE still must be enabled to access to address in domain network.

    Thank you


    Thursday, January 07, 2016 11:52 PM

Answers

  • Hi,
     
    Am 08.01.2016 um 00:52 schrieb Ramplstilskin:
    > is there a way to disable IE internet access
     
    This is not a GPO Task, this should ruled by your Proxy/Firewall.
    Identify the user agent and block it.
     
    The problem is, when using heterogen IE Versions on your clients
    Manipulating the IE Options efects IE11 aswell, because there is only
    one config for IE in general on your clients.
     
    Defining a wrong proxy and then configure the right one in FF or Chrome
    is a poor solution, because you tell 1.500 Clients to go wrong, instead
    of telling your doorman/bounce in a single setting, who is allowed and
    who is not.
     
    Mark
    --
    Mark Heitbrink - MVP Windows Server - Group Policy
     
    GPO Tool: http://www.reg2xml.com - Registry Export File Converter
     
    Friday, January 08, 2016 9:48 AM

All replies

  • After January 12, 2016, Microsoft will no longer provide security updates or technical support for older versions of Internet Explorer.

    Internet Explorer 11 is the last version of Internet Explorer, and will continue to receive security updates, compatibility fixes, and technical support on Windows 7, Windows 8.1, and Windows 10.

    So instead of disable IE access I shall suggest you to download Internet Explorer 11 for Windows 7 for other operating systems.


    S.Sengupta, Windows Experience MVP

    Friday, January 08, 2016 12:02 AM
  • Hi Ramplstilskin,

    Based on my experience, we can use Software Restriction Policies (SRP) and deny access to "Program Files\Internet Explorer\iexplore.exe" to restrict IE

    The following steps describe how to use Group Policy to restrict Internet Access by assigning a fake IP to proxy:

    To setup Group Policy to restrict Internet Access,  follow these steps.

    1. Open Group Policy by running GPEDIT if you use local group policy or running Active Directory Users and Computers to create a group policy.

    2. Click User configuration>Windows Settings>Internet Explorer Maintenance>Connection.

    3. Right-click on Proxy Settings and then Properties.

    4. Check enable proxy Settings and type a fake IP address, for example 0.0.0.0 on HTTP, and click OK.

    5. Expand Administrative Templates, and expand Windows Components.

    6. Select Internet Explorer, and double-click Disable Changing Proxy Settings.

    7. Select Enabled, and click OK.

    Hope the information is helpful to you.

    Best Regards,

    Alvin Wang


    Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Friday, January 08, 2016 6:43 AM
    Moderator
  • this article may be helpful:

    http://www.ithacks.com/2009/03/12/using-the-ie-content-advisor-to-block-all-internet-access/


    Don [doesn't work for MSFT, and they're probably glad about that ;]

    Friday, January 08, 2016 6:52 AM
  • Hi,
     
    Am 08.01.2016 um 00:52 schrieb Ramplstilskin:
    > is there a way to disable IE internet access
     
    This is not a GPO Task, this should ruled by your Proxy/Firewall.
    Identify the user agent and block it.
     
    The problem is, when using heterogen IE Versions on your clients
    Manipulating the IE Options efects IE11 aswell, because there is only
    one config for IE in general on your clients.
     
    Defining a wrong proxy and then configure the right one in FF or Chrome
    is a poor solution, because you tell 1.500 Clients to go wrong, instead
    of telling your doorman/bounce in a single setting, who is allowed and
    who is not.
     
    Mark
    --
    Mark Heitbrink - MVP Windows Server - Group Policy
     
    GPO Tool: http://www.reg2xml.com - Registry Export File Converter
     
    Friday, January 08, 2016 9:48 AM