Can Internet Explorer be Deleted?

[Guest]

I work for a small company that is having major difficulty with internet
abuse. My IT persons tells me that we are on not able to stop people from
having internet access simply by deleting internet explorer from their
individual stations because we are on a LAN, with a router connection to a
DSL line. Is this true? If my IT person is incorrect and we can stop people
by removing internet explorer from their computers would that have any affect
on e-mail? We have a seperate server for e-mail.

 

[Testy]

Get a new IT person.

Testy

 

[Test User]

I work for a small company that is having major difficulty with internet
abuse. My IT persons tells me that we are on not able to stop people from
having internet access simply by deleting internet explorer from their
individual stations because we are on a LAN, with a router connection to a
DSL line. Is this true? If my IT person is incorrect and we can stop people
by removing internet explorer from their computers would that have any affect
on e-mail? We have a seperate server for e-mail.

There are probably better ways to do block the traffic you don't want, such
as using the filtering functions on the router. With this you won't have
to deal with - and monitor for browser installs - every machine.

For example, all someone has to do is bring Firefox in on a CD, and your
plan is bypassed.

Learn more about your router and in particular its filtering and logging
features.

HTH
-pk

 

[gerryf]

There are lots of ways to handle this besides removing IE, which is
complicated, and can cause more problems than you want to experience. It
would not impact email, if you did.

People might just install an alternate browser.

Quickest solution, block ports 80 and 8080 at the router. No more outside
access to the world wide web

And get a new IT person.

 

[Dan DeStefano]

No, removing access to Internet Explorer does not affect e-mail. However, I
would not delete IE, instead, set the computer's local Group Policy to deny
access to IE. If you are using Active Directory, then it is easier to set a
GPO for the machines that should have IE disabled.
To disable IE on a machine-by-machine basis go to start>run and type
"gpedit.msc" to open the Group Policy MMC console. Then browse to Local
Computer Policy>User Configuration>Administrative Templates>System then
double-click on "Don't run specified Windows applications." In the resulting
dialog box click the "Enabled" radio button, then click "Show." In the next
dialog box, click "Add," then enter "iexplore.exe." click OK, OK, OK... and
close the Group Policy MMC. This will disallow users from running IE on the
machine the policy was configured on. If you need to do this on a few
machines, then I recommend using AD GPOs instead of local Group Policies,
they are more flexible and scalable. The policy is located in the same path
in the AD GPO as in the local GP.

Dan DeStefano

 

[Tim_]

I work for a small company that is having major difficulty with internet
abuse. My IT persons tells me that we are on not able to stop people from
having internet access simply by deleting internet explorer from their
individual stations because we are on a LAN, with a router connection to a
DSL line. Is this true? If my IT person is incorrect and we can stop
people by removing internet explorer from their computers would that have
any affect
on e-mail? We have a seperate server for e-mail.

Implement a SQUID proxy server for maximum control.