Disable Internet Explorer using Intune | Endpoint Manager

This post covers the steps to disable Internet Explorer using Intune on Windows 10 devices. You can disable Internet Explorer as a standalone Browser with few easy steps using Intune.

Microsoft has announced that the Internet Explorer 11 desktop application will be retired and go out of support on June 15, 2022, for certain versions of Windows 10.

After the support ends, the Internet Explorer will not receive any updates from Microsoft. What Microsoft recommends is to switch to Edge browser which receives updates very frequently.

You may have some apps and websites that work only on IE. So in such cases you can enable Internet Explorer mode in Edge and test your apps and websites for the compatibility.

If you aren’t using Intune and would like to disable Internet Explorer, Group Policy is the easy option. Read my post on how to disable Internet Explorer using Group Policy.

Another advantage that Edge offers is the ease of deployment. Edge has enterprise installers that can be deployed to endpoints using tools like Configuration Manager and Intune.

With Configuration Manager, you can also manage and deploy Microsoft Edge updates to endpoints. So now that you know, Edge offers more advantages, it’s time to get rid of Internet Explorer and switch to Edge.

Prerequisites to disable Internet Explorer

Some important prerequisites to go through before you disable Internet Explorer using Intune.

  • Operating systems and updates:
  • Windows 10, version 2004, Windows Server version 2004, Windows 10, version 20H2: KB4598291 or later
  • Windows 10 version 1909, Windows Server version 1909: KB4598298 or later
  • Windows 10 version 1809, Windows Server version 1809, and Windows Server 2019: KB4598296 or later
  • Windows 10, version 1607, Windows Server 2016: KB4601318 or later
  • Windows 10 initial version (July 2015): KB4601331 or later
  • Windows 8.1: KB4601384 or later
  • Windows Server 2012: KB4601348 or later
  • Microsoft Edge Stable Channel

Steps to Disable Internet Explorer using Intune

Let’s look at the steps to disable Internet Explorer using Intune.

  • Login to the Microsoft Endpoint Manager admin center.
  • Click Devices > Windows > Configuration Profiles.
  • Click Create Profile, and we will define settings to disable Internet Explorer.
Disable Internet Explorer using Intune
Disable Internet Explorer using Intune

On the Create a profile page, select the Platform as Windows 10 and later. Select Profile type as Templates. Next you must select a Template Name which will a custom one in this case. So click Custom and then click Create.

Disable Internet Explorer using Intune
Disable Internet Explorer using Intune

On the Basics window, specify the name as Disable Internet Explorer 11. You may add a description and associate more info. Click Next.

Disable Internet Explorer using Intune
Disable Internet Explorer using Intune

On the Configuration Settings page, let’s add OMA-URI Settings by clicking Add button.

Disable Internet Explorer using Intune
Disable Internet Explorer using Intune

On the Add Row page of OMA-URI Settings, specify the following.

  • Name – Specify the name
  • Description – Add a description (optional)
  • OMA-URI – ./Device/Vendor/MSFT/Policy/Config/InternetExplorer
  • Data Type – String

Enter the following data in the Value field.

<enabled/><data id="NotifyDisableIEOptions" value="2"/>

Save the information.

OMA-URI Settings
OMA-URI Settings

The OMA-URI settings that you defined to disable Internet Explorer now appears under Configuration Settings window. Click Next.

Disable IE Configuration Settings
Disable IE Configuration Settings

On the Assignments page, add your security groups and click Next.

Disable Internet Explorer using Intune
Disable Internet Explorer using Intune

On the Applicability Rules section, you can specify how to apply the profile within an assigned group. Based on the criteria that you specify here, Intune will apply the profile to devices that meet the criteria.

I am not going to define any criteria here as I am deploying the profile to my test Windows 10 devices. So click Next.

Disable Internet Explorer using Intune
Disable Internet Explorer using Intune

On the Review + Create page, you can verify the settings and click Create.

Disable Internet Explorer using Intune
Disable Internet Explorer using Intune

To check if Internet Explorer is disabled or not, login to one of the devices. Click Start and launch the Internet Explorer app. You immediately see a message box. Internet Explorer – This action is restricted. For more information, please contact your system administrator.

Click OK to close the box.

Disable Internet Explorer as a standalone Browser
Disable Internet Explorer as a standalone Browser

Prajwal Desai

Hi, I am Prajwal Desai. For last few years I have been working on multiple technologies such as SCCM / Configuration Manager, Intune, Azure, Security etc. I created this site so that I can share valuable information with everyone.
Photo of author

3 thoughts on “Disable Internet Explorer using Intune | Endpoint Manager”

  1. I’m getting an error on the deployment when I send it to a test group, and IE isn’t disabled. I’m running 21H1 on all the test workstations, and Edge is the “Official build”. The event viewer isn’t really giving me much information either.

    Reply

Leave a Comment