How do I use the Microsoft Internet Explorer (IE) 7 blocker tool?

Start the Microsoft Management Console (MMC) Active Directory Users and Computers snap-in (Start, Programs, Administrative Tools, Active Directory Users and Computers).

Right-click the OU to which you want to have the policy applied and select Properties.

Select the Group Policy tab.

Click the New button and enter a name for the policy (e.g., "Block IE7") and press Enter.

Select the new policy and click Edit.

Right-click Administrative Templates under Computer Configuration and select Add/Remove Templates.

Click Add and select the IE70Blocker.adm system template. Click Open, then select Close on the Add/Remove Templates dialog box.

From the View menu, select Filtering.

Clear the "Only show policy settings that can be fully managed" check box and click OK.

Navigate to Computer Configuration, Administrative Templates, Windows Components, Windows Update, Automatic Updates Blockers.

Double-click "Do not allow delivery of Internet Explorer 7 through Automatic Updates" and set to Enabled, then click OK, as the figureshows.

Close the Group Policy Object Editor. The next time machines refresh their policy, the new setting will take effect.