Block all web browsers solution

Question

Hello,

Sharing a good with you ;)

A question, if the organization uses the MS 365 E3 license, where MDM is used via Azure AD + Intune + Defender Plan 1,

Can we block all browsers except maybe Chrome and MS Edge?

Is there data in the Windows Settings/Security, that is "filtering" the application that this application is used for "web browsing"?

We could follow the Internet news and block any browser released by the file hash, and location, but this is quite a lot of work,

We could buy a Proxy App/Agent, but this adds an extra environment, management, costs, etc.

What Microsoft offers to let's say "use only MS EDGE and block any other browser"?

Answer 1

You may use WDAC to do this , have a look at:

https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/deployment/deploy-windows-defender-application-control-policies-using-intune

You may have a look at:

https://techcommunity.microsoft.com/t5/intune-customer-success/support-tip-using-applocker-to-create-custom-intune-policies-for/ba-p/364981

You may set policy to block other applications such as other browsers.