Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Can I deny "Internet Explorer" via GPO and use Google Chrome as a default and the only Browser?

I wonder as Internet Explorer is a part of an Windows operating system, if it's possible to deny it.

I would like to force users to use Google Chrome only as a browser.

share|improve this question

I think that you can try and use Software Restriction Policies (SRP) and deny access to "Program Files\Internet Explorer\iexplore.exe" to restrict IE. Also if you have Win2008 R2 as a DC and all of your clients have Win7, then you can use the new feature that is similar to SRP but much better and it is called AppLocker, which can also be found on the list the other Group Policy Settings:

On a Windows 7 Client go to:
Group Policy Editor ("Start", in the search field enter "gpedit.msc") -> Computer Configuration -> Windows Settings -> Security Setings -> AppLocker.

Just be adviced that if you use SRP first and then you apply some policies with the AppLocker then the AppLocker settings will take precedence and will override any settings that were defined through SRP and all of the SRP settings will be instantly disabled.

You can find more info about the new AppLocker feature on this two links:

share|improve this answer

Deny access to iexplore.exe executable with file system rights. You might have problems with other windows components and it might be easier just to educate the users. The European releases of Windows have a non-IE and a non-MediaPlayer version.

share|improve this answer
Ugh, really, did you have to put that last line in there? -1 But you're absolutally correct that you can get versions of Windows that do not have IE, so +1. Which evens out to +0. – Mark Henderson Dec 17 '11 at 2:43
Linux is not always perfect solution. Windows is a necessity at most places and most likely always be so. -1 – Jacob Dec 17 '11 at 2:52
I never stated that Linux is a perfect solution. I just wanted to add as an alternative. – Mircea Vutcovici Dec 19 '11 at 17:01
-1's over a single line in a legitimate answer? – Aaron Copley Dec 19 '11 at 22:55
@AaronCopley yes. Operating system wars are down the hall, to the left and through the door marked "not welcome on Server Fault". – RobM Dec 19 '11 at 23:20

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.