This post covers the steps to disable Internet Explorer using Intune on Windows 10 devices. You can disable Internet Explorer as a standalone Browser with few easy steps using Intune.
Microsoft has announced that the Internet Explorer 11 desktop application will be retired and go out of support on June 15, 2022, for certain versions of Windows 10.
After the support ends, the Internet Explorer will not receive any updates from Microsoft. What Microsoft recommends is to switch to Edge browser which receives updates very frequently.
You may have some apps and websites that work only on IE. So in such cases you can enable Internet Explorer mode in Edge and test your apps and websites for the compatibility.
If you aren’t using Intune and would like to disable Internet Explorer, Group Policy is the easy option. Read my post on how to disable Internet Explorer using Group Policy.
With Configuration Manager, you can also manage and deploy Microsoft Edge updates to endpoints. So now that you know, Edge offers more advantages, it’s time to get rid of Internet Explorer and switch to Edge.
Prerequisites to disable Internet Explorer
Some important prerequisites to go through before you disable Internet Explorer using Intune.
- Operating systems and updates:
- Windows 10, version 2004, Windows Server version 2004, Windows 10, version 20H2: KB4598291 or later
- Windows 10 version 1909, Windows Server version 1909: KB4598298 or later
- Windows 10 version 1809, Windows Server version 1809, and Windows Server 2019: KB4598296 or later
- Windows 10, version 1607, Windows Server 2016: KB4601318 or later
- Windows 10 initial version (July 2015): KB4601331 or later
- Windows 8.1: KB4601384 or later
- Windows Server 2012: KB4601348 or later
- Microsoft Edge Stable Channel
Steps to Disable Internet Explorer using Intune
Let’s look at the steps to disable Internet Explorer using Intune.
- Login to the Microsoft Endpoint Manager admin center.
- Click Devices > Windows > Configuration Profiles.
- Click Create Profile, and we will define settings to disable Internet Explorer.
On the Create a profile page, select the Platform as Windows 10 and later. Select Profile type as Templates. Next you must select a Template Name which will a custom one in this case. So click Custom and then click Create.
On the Basics window, specify the name as Disable Internet Explorer 11. You may add a description and associate more info. Click Next.
On the Configuration Settings page, let’s add OMA-URI Settings by clicking Add button.
On the Add Row page of OMA-URI Settings, specify the following.
- Name – Specify the name
- Description – Add a description (optional)
- OMA-URI – ./Device/Vendor/MSFT/Policy/Config/InternetExplorer
- Data Type – String
Enter the following data in the Value field.
<enabled/><data id="NotifyDisableIEOptions" value="2"/>
Save the information.
The OMA-URI settings that you defined to disable Internet Explorer now appears under Configuration Settings window. Click Next.
On the Assignments page, add your security groups and click Next.
On the Applicability Rules section, you can specify how to apply the profile within an assigned group. Based on the criteria that you specify here, Intune will apply the profile to devices that meet the criteria.
I am not going to define any criteria here as I am deploying the profile to my test Windows 10 devices. So click Next.
On the Review + Create page, you can verify the settings and click Create.
To check if Internet Explorer is disabled or not, login to one of the devices. Click Start and launch the Internet Explorer app. You immediately see a message box. Internet Explorer – This action is restricted. For more information, please contact your system administrator.
Click OK to close the box.