Safely disabling and preventing Internet Explorer execution without causing Blue Screen of Death (BSoD).

Question

In my Windows Server and Windows workstation OS, how can I prevent Internet Explorer 11 from executing without resulting in a Blue Screen of Death (BSoD)?

I have implemented the following group policy:

Computer Configuration/Administrative Templates/Windows Components/Internet Explorer

• Disable Internet Explorer 11 as a standalone browser. [Enabled]

But somehow, this can still be bypassed using the below VB script:

CreateObject("InternetExplorer.Application").Visible=true

Performing the following action could result in a BSOD as IE is deeply integrated with the Windows Explorer program:

C:\Windows\System32\dism.exe /online /Disable-Feature /Quiet /FeatureName:Internet-Explorer-Optional-amd64

Your assistance and suggestions are greatly appreciated.

Answer 1

FYI, using the AppLocker to stop IE11 is even more dangerous as it blocks other Windows functionality: