IE10 is here and now part of the windows important updates meaning automatic installation of IE10 on your clients machines.
This can be prevented easily with WSUS but what about those environments without WSUS to manage updates.
This is a quick How To disable IE10 automatic update via group policy rather than WSUS (this will not work if you have update deployment management in place).
1.
Download Microsofts toolkit
Download the tool kit from
Download Toolkit to Disable Automatic Delivery of Internet Explorer 10 from Official Microsoft Download Center
2.
Open and store files
Open the exe and chose a location to save the files
3.
Add to group policy
Now go to group policy management and create a new policy and edit it or edit an existing policy.
Go to Computer configuration>polices, right click on "Administrative Templates" and click add/remove templates
click "Add..." and go to the folder you put the files and choose the "IE10_Blocker.adm"
4.
block or unblock
now simply expand administrative templates>Classic administrative templates> windows components>windows update>automatic updates blocker v3
in there will be an option called "Do not allow delivery of internet explorer 10 through automatic updates" edit the policy settings to either enable (to block) or disable (to allow).
5.
gpupdate
now just force a group policy update out to you client machines as you see fit and IE10 will not install through automatic updates.
Conclusion
This does not prevent users downloading and installing IE10 in other ways.
If you want to run this just on one machine you can run "Command Prompt” as Administrator.
Type “CD” followed by the path to where you have extracted the files to
and type "ie10_blocker.cmd /B"