This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(105.60000000000001, 53%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EO%3C/text%3E%3C/svg%3E)
Hello,
Sharing a good with you ;)
A question, if the organization uses the MS 365 E3 license, where MDM is used via Azure AD + Intune + Defender Plan 1,
Can we block all browsers except maybe Chrome and MS Edge?
Is there data in the Windows Settings/Security, that is "filtering" the application that this application is used for "web browsing"?
We could follow the Internet news and block any browser released by the file hash, and location, but this is quite a lot of work,
We could buy a Proxy App/Agent, but this adds an extra environment, management, costs, etc.
What Microsoft offers to let's say "use only MS EDGE and block any other browser"?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(89.60000000000001, 81%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERA%3C/text%3E%3C/svg%3E)
You may use WDAC to do this , have a look at:
You may have a look at:
You may set policy to block other applications such as other browsers.
Hello @Reza-Ameri,
Does this mean that we have to work per the applications trust list?
Like we scan all devices, build a "trust list", deploy WDAC to allow the "trusted list" and block all other applications?
What you are requiring is block in application level, you have two options, one is to create a trusted list, and block the rest but it might block other trustworthy programs. You may create untrusted list which allow every item except the one in trusted list. You should already have list of installed applications in the Microsoft Intune.
Just wondering if there is any other and maybe easier solution to achieve this... any other solutions/ideas?