I've been receiving complaints from a good number of users about Internet Explorer 10 breaking important Web applications that they use. So, I've been uninstalling IE 10 from those machines. But, how can I create a policy that only denies IE 10 for the members of that policy?
I tried creating a policy that only denies IE 10, and added that policy to specific machines. I was hoping it would install all of the approved patches in the default policy and deny the ones in the "IE 10 Block" policy. But, instead it shows many of the relevant patches Pending.
How does everyone else handle a situation like this?