question

hudsonhery-6063 avatar image
0 Votes"
hudsonhery-6063 asked ·

Internet Explorer Settings

Hi, I want to ask is there a way to setup ie only be used during office hours for an OU
Example: 8am - 12am

windows-group-policy
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DaisyZhou-MSFT avatar image
0 Votes"
DaisyZhou-MSFT answered ·

Hello @hudsonhery-6063,

Thank you for posting here.

After my research, there is no such existing GPO setting for your requirement.

And I have asked engineer from broswer team, he said from IE browser side, there is no such setting that can fulfil your requirement, either.

Thank you for your understanding and support.



Best Regards,
Daisy Zhou

· 3 ·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thanks you for the answer, I have a new idea

Hope you can check it out for me.

The idea is:

Can we add, remove or change the value of the GPO "not allow to run following software" by using schedule task?
If this possible, Can I get the goal for what I mentions above ?


0 Votes 0 ·

Hello @hudsonhery-6063,

Thank you for your update.

Can you tell me the GPO path of "not allow to run following software"?

For example: Computer Configuration\Policies\Administrative Templates..........

I can not find ""not allow to run following software"".



Best Regards,
Daisy Zhou

1 Vote 1 ·

It's in Computer Configuration\Policies\Administrative Templates\System\Don't run specified Windows applications

I add iexplore.exe in this GPO, gpupdate and when I log on with user account I can not run IE anymore.

Does it is the main function of this GPO?

Hery Hudson


0 Votes 0 ·
DaisyZhou-MSFT avatar image
0 Votes"
DaisyZhou-MSFT answered ·

Hello @hudsonhery-6063,

Thank you for your update and sharing.

I can see it is under User Configuration\Policies\Administrative Templates\System\Don't run specified Windows applications (not User Configuration ).

And here is the description of this group policy.

77030-pre1.png


If the user account can not run IE , it is the function of this GPO.

Should you have any question or concern, please feel free to let us know.



Best Regards,
Daisy Zhou



pre1.png (16.2 KiB)
· 2 ·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thanks for you answer @DaisyZhou-MSFT

I wonder is there any way to triggered this GPO via Task Schedule or powershell script?

0 Votes 0 ·

Hello @hudsonhery-6063,

The GPO above is what you want.

Why you want Task Schedule or powershell script to replace the GPO?

I am sorry, I do not familiar with PS script. Not sure if it is there any way to triggered this GPO via Task Schedule or powershell script.





Best Regards,
Daisy Zhou

0 Votes 0 ·