How can I remove Internet Explorer from certain users on our network?

Posted on 2007-07-30
Last Modified: 2013-12-08
We have employees using Windows XP Professional with some using Internet Explorer 6 and some 7.  I would like to take away internet from certain individuals.  If possible I would like to be able to log in as administrator and access internet for updates but not allow the user to access ie.  I do not have Citrix or a Windows server - only a Novell server -  so it seems I would have to do it at an individual level.  What is the best solution?
Question by:bpetrick
    LVL 9

    Expert Comment

    Remove the Default gateway on their Machines.

    Use DHCP reservations to hand out IP addreses to those User Machines, but do not give them a "Gateway"

    This will allow you to login, add the correct gateway, and connect to the internet. However, a "normal" user will not be able to.

    Just one way of accomplishing this.

     - brugh

    LVL 5

    Expert Comment

    You could use a local policy to disable the connection tab in IE. That way you could set the connection details in IE as you desire, and then hide the connection tab so that your users can not change them.
    LVL 70

    Accepted Solution

    You can also use software restriction policy to prevent users executing Internet explorer. You would normally need to put the users into an OU and then apply the restriction to the OU, but you could filter by security group if this was really necessary. see

    LVL 70

    Expert Comment

    That info I gave you applies to a windows domain - which I've just noticed you do not have. Any restriction is going to be a pretty laborious machine-by-machine affair. If you don't want some machines to get out onto the intermet then Brugh's suggestion is as good as any, but this will be by machine NOT user.
    LVL 42

    Expert Comment

    you could enable the restrictions at your gateway router.  some routers will block traffic based on IP address (which would require you to set static IP's on the computers you want to block), and some allow you to block based on MAC address.

    this is a very easy way to block internet access.  if you restrict IE on a per-computer basis, it's a lot of work, AND, the user can always circumvent by installing an alternate browser.  if you restrict all internet access from LAN to WAN on the gateway router, that computer is not getting to the internet no matter what browser is used.

    Author Comment

    I have to use static IP addresses for various reasons..  so i cannot remove the gateway.. it appears machine-machine updating local policy with the software restriction is going to be the best option..  thanks for the help to all responding..
    LVL 9

    Expert Comment

    Static IPs don't have to have Gateways. :) Just much more a pain to set them up cause you have "touch" each node inorder to modify its settings.

    Gateways are only "needed" when you need to access an address that isn't on your local subnet.... like the Internet.

     - Brugh

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Highfive Gives IT Their Time Back

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    Introduction If you're like most people, you have occasionally made a typographical error when you're entering information into an online form.  And to your consternation, the browser remembers the error, and offers to autocomplete your future entr…
    Several part series to implement Internet Explorer 11 Enterprise Mode
    Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
    This Micro Tutorial will demonstrate how to add subdomains to your content reports. This can be very importing in having a site with multiple subdomains.

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    14 Experts available now in Live!

    Get 1:1 Help Now