Internet Explorer 11 is very very old and insecure and should not be used for public browsing anymore. We still need in for many, often internal, websites that still only works in IE 11 or for example requires SilverLight.
Introduced in Windows 10 and Server in February 2021 Cumulative Update, a new setting enables us to show a message to the end user if we want to restrict the use of Internet Explorer 11 and instead open Edge. Great! If we have our IE Site Mode List correctly configured and working, then this is a great option.
This little video shows how it will look like for the end-user.
How do we configure it then? If we look at a Windows 10 device for example with the February update installed, we can see that Inetres.admx was updated in February. So simply copying that to our central Policystore we can configure the setting.
updated Inetres.admx 1
For more information: https://docs.microsoft.com/en-us/deployedge/edge-ie-disable-ie11
Using group Policy the setting is under Computer Configuration\Administrative Templates\Windows Components\Internet Explorer as shown in the picture below.
Disable Internet Explorer 11
When configuring it we have three options if the dialog should be shown for the end-user or not. And If we show it, we can select only once or every time. Maybe every time is not really an option as they will most likely be annoyed.
Disable IE 11 options
As soon as the supported OS is updated with a Cumulative Update that adds support the setting will be active.
For our Intune modern managed devices, we need to configure this setting as well. The good thing is that the .ADMX and .ADML file is already on the device so we do not need to provision it.
The following Custom setting will do the trick.
Custom policy
It is easier to copy and paste it from here:
OMA-URI: ./Device/Vendor/MSFT/Policy/Config/InternetExplorer/DisableInternetExplorerApp
Data type: String
Value: <enabled/><data id="NotifyDisableIEOptions" value="1"/>
If we look in the .ADMX file the following is the part with the settings we can set the value to.
Settings available:
0 = Never
1 = Always
2 = Once per user
We need to start getting rid of Internet Explorer and this is a good way until we can finally remove it when all sites/apps with dependencies are decommissioned.
Let’s all hope that is sooner than later