With the release of Microsofts Chromium-based Edge browser, the end is near for Internet Explorer 11. In one of the latest Windows 10 Preview builds, Microsoft made a Group Policy setting available to Disable Internet Explorer 11 as a standalone app.
In the GP Editor the setting is found under Administrative Templates, Windows Components, Internet Explorer.
As we can see, we can enable the policy and choose one of three options for notifying the end-user.
As the setting isn`t yet available in a current Windows 10 build, the setting isn`t available yet in the Microsoft Intune portal. But we can configure the setting with a custom configuration profile, which I show in the post.
I`m not sure in which preview build Microsoft added this setting. I`m running Windows 10 Insider Preview Build 20270 in which I found the setting.
Create custom configuration profile
As the setting is added to an existing admx file (inetres.admx) which is already supported by Intune, there is no need to ingest the admx file like we need to do with for example Google Chrome. The solution is pretty straight forward, we just need to create a custom configuration profile with one row.
We only need the exact policy name as found in the inetres.admx file and the corresponding ID.
For this, we open the admx file on a Windows 10 device that already supports the setting and search for the policy setting; DisableInternetExplorerApp. Here is also the enum ID mentioned, which we need to use later in the profile as data ID. Also notice, the three notify options with a corresponding value.
With this information we can build up our OMA-URI which we need when we use a custom profile:
As explained in previous posts, the first part is always ./Device/Vendor/MSFT/Policy/Config. And in this case, it`s followed by the name of the Category (without a space) and last the policy name.
Let`s configure the profile.
- Sign-in to the Endpoint Manager admin center
- Browse to Devices – Windows
- Browse to Configuration profiles
- Click +Create profile
- Choose Windows 10 and later as Platform
- Choose Custom as Profile
- Click Create
- Give the profile a Name
- Enter a Description (Optional)
- Click Next
- Click Add on the Configuration settings tab
- Give the Row a Name
- Fill in the OMA-URI: ./Device/Vendor/MSFT/Policy/Config/InternetExplorer/DisableInternetExplorerApp
- Data type: String
<enabled/><data id="NotifyDisableIEOptions" value="2"/>
- Click Save
Here, above value corresponds to one of the notify values as found in the admx file. Change this to your needs.
Finish setting up the configuration wizard by assigning the profile to a security group of choice.
The Internet Explorer shortcut is removed from the start menu, but IE can still be found under Program Files. Depending on the choice of the notification you made, the below notification is shown to the end-user.
End after that the Edge browser is started.
That`s it for this post. Keep in mind this settings is just released in preview.