asked on

Force IE 10 to be the default browser via 2012 GPO

I would like to force our computers to use IE 10 by default, and I would like to prevent our users from changing their default to Chrome/Firefox...etc. I would like to accomplish this via GPO if possible.

I've looked at links like this, but these settings in Group Policy are not available for me as I have 2012 installed.
Possible Options

I will be forcing this setting for Windows 7 x64 machines.

Accomplishing this via a startup script, or logon script, would be OK, but I would prefer a GPO setting instead. :)

Thanks Experts!

-IT_Crowd

Merete

Hold off doing this for a while and use Chrome please

Microsoft has released a security advisory that warns about remote code executions in various versions of Internet Explorer.
"This issue allows remote code execution if users visit a malicious website with an affected browser," Microsoft said. "This would typically occur by an attacker convincing someone to click a link in an email or instant message."
The bug affects Internet Explorer 6 - 11, though according to security firm FireEye, "the attack is targeting IE9 through IE11."
http://www.pcmag.com/article2/0,2817,2457206,00.asp
Zero-Day Internet Explorer Vulnerability Let Loose in the Wild
http://www.symantec.com/connect/blogs/zero-day-internet-vulnerability-let-loose-wild
Symantics offers a patch
Symantec has also provided a batch file that you can download to automate the command-line and you can get it here: Zero-Day Internet Explorer Vulnerability Let Loose in the Wild
http://www.symantec.com/connect/blogs/zero-day-internet-vulnerability-let-loose-wild

IT_Crowd

ASKER

Yes, we've also heard about this. We are going to wait until this issue is patched. I still would like to know how this can be accomplished though. :)

jcimarron

IT_Crowd--
Adobe offers a new version of Flash Player that should prevent the zero day problem on IE.
https://helpx.adobe.com/security/products/flash-player/apsb14-13.html

SOLUTION

Merete

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

IT_Crowd

ASKER

Thank you - I will try this. Unfortunately, we live in a world were certain applications rely on Internet Explorer. Our accounting package, for instance, requires IE. Our Intranet, and other sub applications - require IE. Trust me, we aren't doing this because we LOVE Internet Explorer....

Merete

Thank you, yes I understand.
According to Microsoft users can protect themselves against this exploit by simply enforcing>Enabled Protected Mode in the Security tab of IE.
You should also be aware of this flash virus that targets all browsers
Remove “WARNING! Your Flash Player may be out of date” virus
http://malwaretips.com/blogs/warning-your-flash-player-may-be-out-of-date-virus/

SOLUTION

McKnife

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Merete

The exploit was patched last week my time
If you have automatic updates install enabled it would have been installed on Friday my time. Otherwise check your windows updates you'll see one there for IE.
Microsoft has issued a patch for the Internet Explorer flaw that lets hackers take control of your computer -- even for users of Windows XP.
http://money.cnn.com/2014/05/01/technology/security/internet-explorer-bug/

ASKER CERTIFIED SOLUTION

McKnife

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

JoeEdafio

No browser is completely safe!
Browsing habits and reading and understanding messages within are critically important along with common sense.
If it doesn't look right it probably isn't....

Google Chrome. http://www.huffingtonpost.com/2013/08/07/google-chrome-security_n_3719233.html

Most of the changes in Group Policy that you propose are not supported on version of IE after IE9.
Versions IE9 and prior do not have the added safety features of IE 10 & IE11
IE11 is a pain because many sites do not work with it.
So FireFox is another viable option... but then again refer to the first statement...