Internet Explorer - Edge Adaptation

[ihsano]

Hi Everyone,

Our applications have dependencies on internet explorer in My company.
At the same time our cybersecurity team forced us to disable i.e and use edge in i.e mode.
I found the solution for systems in Active Directory:
-enable policy: “disable i.e as standalone browser”
-after adding required fields, enable these policies: “configure i.e integration” and “send all intranet sites to i.e”

When I search for bigfix solution, I saw this:
"waithidden powershell.exe -C Disable-WindowsOptionalFeature -FeatureName Internet-Explorer-Optional-x86 –Online -NoRestart"
But this solution take effect after reboot. Is there any way to make changes without reboot?

[dgendera]

Unfortunatly this is Microsoft We’re having the same issue/challenge way we’re going to address this is by deploying this Fixlet around same time we deploy our Monthly patches which requires reboot anyway.

Hope this clarifies.

[atlauren]

If you use the registry entry/GPO method, the system will prompt the user before shunting to edge.

Disable Internet Explorer 11

See also the sample I posted here:

Fixlet to Uninstall IE 11 for Windows 10 machines

FYI, Tenable’s plugin 22024 looks for a policy/registry entry that redirects IE calls to Edge. Internet Explorer is being detected as enabled on this device. This is due to the fact that the Registry key is missing or not set: ‘\HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\NotifyDisableIEOptions’ https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.InternetExplorer::DisableInternetExplorerApp ergo, Tenable customers might consider a belt-and-suspenders approach…

[ihsano]

Hi again,

We are using managment features with powershell right? (like this command: “waithidden powershell.exe -C Disable-WindowsOptionalFeature -FeatureName Internet-Explorer-Optional-x86 –Online -NoRestart” )

I wonder if any method exists for using group policies directly from bigfix?
For example-> I want to enable “AdministrativeTemplates/WindowsComponents/InternetExplorer/disable i.e as standalone browser” feature on clients with bigfix and then run “gpupdate /force” command.

Sorry If this issue is mentioned before, I couldnt find what I am looking for