Group Policy: Disabling Internet Explorer Add-Ons

If you want to enable / disable an Internet Explorer Add-On via group policy, you will firstly need the “Class ID” of the Add-On.

Within IE, select “Manage Add-Ons” from the Tools Menu. From there, select your Add-On and click “More Information”. For the purposes of  this example, I have chosen the “Java™ Plug-In SSV Helper”.

clip_image002

You can use the “Copy” button to place all the details into the clipboard (as I have done in the table below).

clip_image002[4]

Below shows some sample Add-On information (we only need the “Class ID” in order to disable the Add-On).

Name: Java(tm) Plug-In SSV Helper
Publisher: Oracle America, Inc.
Type: Browser Helper Object
Architecture: 32-bit and 64-bit
Version: 8.0.450.14
File date: ‎17 ‎April ‎2015, ‏‎12:17
Date last accessed: Not available
Class ID: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}
Use count: 0
Block count: 0
File: ssv.dll
Folder: C:\Program Files\Java\jre1.8.0_45\bin
Name: Java(tm) Plug-In 2 SSV Helper
Publisher: Oracle America, Inc.
Type: Browser Helper Object
Architecture: 32-bit and 64-bit
Version: 8.0.450.14
File date: ‎17 ‎April ‎2015, ‏‎12:17
Date last accessed: ‎10 ‎July ‎2015, ‏‎11:52
Class ID: {DBC80044-A445-435B-BC74-9C25C1C588A9}
Use count: 0
Block count: 3125
File: jp2ssv.dll
Folder: C:\Program Files\Java\jre1.8.0_45\bin

Finally, we need to configure the Group Policy itself.

Within a suitable Group Policy Object (GPO)..

  • Navigate to: User Configuration => Policies => Administrative Templates => Windows Components => Internet Explorer => Security Features => Add-On Management
  • Enable the Add-On List” setting
  • Click the “Show” button
  • Click the “Add” button
  • Copy the “Class ID” value you obtained earlier in the exercise, and copy it into the “Name” field
  • Set the “Value” field = 0 to disable to add-in (make sure you include the brackets): 0 = Disable; 1 = Enable
  • Click “OK” to save the data

clip_image002[6]

Add any other items to the list as required.

clip_image002[8]

Click “OK”, and you’re done.

Give the policy time to refresh on your network, and you should find that all of the Add-On(s) have been disabled.

clip_image002[10]

Advertisements

Leave a Reply

Please log in using one of these methods to post your comment:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s