Fixlet to Uninstall IE 11 for Windows 10 machines

Content Authoring
8

FYI, Tenable’s plugin 22024 looks for a policy/registry entry that redirects IE calls to Edge.


Internet Explorer is being detected as enabled on this device.
This is due to the fact that the Registry key is missing or not set:

'\HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\NotifyDisableIEOptions'

https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.InternetExplorer::DisableInternetExplorerApp

ergo, Tenable customers might consider a belt-and-suspenders approach:


if {x64 of operating system}
	regset64 "[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Main]" "NotifyDisableIEOptions"=dword:00000002
	waithidden powershell.exe -C Disable-WindowsOptionalFeature -FeatureName Internet-Explorer-Optional-amd64 –Online -NoRestart
else
	regset "[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Main]" "NotifyDisableIEOptions"=dword:00000002
	waithidden powershell.exe -C Disable-WindowsOptionalFeature -FeatureName Internet-Explorer-Optional-x86 –Online -NoRestart
endif
continue if { exit code of action = 0 }

action requires restart "remove-ie-11"
3 Likes