Need to Block IE 10 and later, Windows 2008 domain, Windows 7 clients

We have software that's incompatible with IE versions over 9.  What's the best and easiest way to ensure that our users cannot get updates via windows update or manual upgrade?  Is there a group policy solution?  Thanks.
LVL 1
LB1234Asked:
Who is Participating?
 
valmaticConnect With a Mentor Commented:
they can still go into the control panel then go to windows update, and they would have to click check for updates from microsoft, it is a little line of wording near the button where you can say install.
You could use group policy to control access to the control panel as well.
0
 
valmaticCommented:
do you use WSUS server for controlling updates?
If not you should look into installing it. It is fairly simple to install and free.
You can control what updates people get on your network, instead of the computer looking out to the web for updates.
With this WSUS server you will need to add a couple of settings to your group policy or the default one if you have not setup anything.
0
 
LB1234Author Commented:
Does WSUS prevent individuals from updating their machines on their own?
0
 
McKnifeCommented:
I would not block control Panel but distribute so called blocker toolkits for IE10 and 11. By Microsoft and free:
http://technet.microsoft.com/en-us/ie/jj898509.aspx and http://www.microsoft.com/en-us/download/details.aspx?id=40722
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.