Can I deny "Internet Explorer" via GPO and use Google Chrome as a default and the only Browser?

I wonder as Internet Explorer is a part of an Windows operating system, if it's possible to deny it.

I would like to force users to use Google Chrome only as a browser.

2 Answers 2


I think that you can try and use Software Restriction Policies (SRP) and deny access to "Program Files\Internet Explorer\iexplore.exe" to restrict IE. Also if you have Win2008 R2 as a DC and all of your clients have Win7, then you can use the new feature that is similar to SRP but much better and it is called AppLocker, which can also be found on the list the other Group Policy Settings:

On a Windows 7 Client go to:
Group Policy Editor ("Start", in the search field enter "gpedit.msc") -> Computer Configuration -> Windows Settings -> Security Setings -> AppLocker.

Just be adviced that if you use SRP first and then you apply some policies with the AppLocker then the AppLocker settings will take precedence and will override any settings that were defined through SRP and all of the SRP settings will be instantly disabled.

You can find more info about the new AppLocker feature on this two links:

  • The links are equal :)
    – domenukk
    Dec 20, 2016 at 13:59

Deny access to iexplore.exe executable with file system rights. You might have problems with other windows components and it might be easier just to educate the users. The European releases of Windows have a non-IE and a non-MediaPlayer version.

  • 3
    Ugh, really, did you have to put that last line in there? -1 But you're absolutally correct that you can get versions of Windows that do not have IE, so +1. Which evens out to +0. Dec 17, 2011 at 2:43
  • 4
    Linux is not always perfect solution. Windows is a necessity at most places and most likely always be so. -1
    – Jacob
    Dec 17, 2011 at 2:52
  • I never stated that Linux is a perfect solution. I just wanted to add as an alternative. Dec 19, 2011 at 17:01
  • -1's over a single line in a legitimate answer? Dec 19, 2011 at 22:55
  • @AaronCopley yes. Operating system wars are down the hall, to the left and through the door marked "not welcome on Server Fault".
    – Rob Moir
    Dec 19, 2011 at 23:20

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .