Windows Server: Block Chrome or Edge for Restricted RDP Users

The problem

A session server may need to run one business application while web browsing remains restricted.

Recommended approach

Use AppLocker or application control with carefully designed user/group rules. Test the policy with a pilot account before broad deployment.

Step-by-step checklist

1. Create a pilot security group.
2. Identify browser executables and update paths.
3. Build allow rules for required business software.
4. Add browser restrictions for the pilot group.
5. Test logon, application launch and policy recovery before expanding.