Mandatory installation of most recent Internet Explorer

[Joe]

I've uninstalled Internet Explorer 8 on Windows 7 through "Turn Windows features on or off", so it isn't used and it doesn't need nor get updates through Windows Update.

Does that mean, WSUSoffline forces an Internet Explorer 10 installation? I don't want IE.

[boco]

Short answer: You're doing it wrong. You need to install IE11, and then you need to install each and any IE11 update even if you do not use the Browser frontend.

Long answer: There are many myths and fallacies concerning that matter. IE is not only a Browser, it's more like a Framework. The browsing engine Trident and other parts are actually system components. Many software programs use them without you being even aware. When you "disable the Browser", you only disable the Browser frontend, the GUI. All other parts stay active in the system and must be updated!

Install IE11, it is the only one supported for Win7, from now on. There will be no further updates for older Browser components, leaving systems vulnerable. Should the IE11 install reactivate the GUI, simply turn it off again.
Let it install IE11 updates even if you do not use IE! The system components need updating, nonetheless.
Say good-bye to the thought that you don't use IE. You do, the system does, you just didn't know it until now.

[-Iwan-]

WSUSOU doesn't force the installation of any version of the Internet Explorer.

[boco]

WSUSOU doesn't force the installation of any version of the Internet Explorer.

From the changelog:

- Mandatory installation of most recent Internet Explorer on Windows Vista, 7 and Server 2008(R2) (x86/x64) systems (see https://www.microsoft.com/en-us/Windows ... IE-support)

[Joe]

Short answer: You're doing it wrong. You need to install IE11

According to Microsoft support, I don't need to install it, if I don't want use it. Uninstalling IE8 through Windows features is enough to stay secure. After doing that Windows Update Client doesn't list IE8 updates as missing anymore, so they don't get installed anyway.

Also Microsoft tells everyone: "You need to install Windows 10" - See the problem?

IE is not only a Browser, it's more like a Framework. The browsing engine Trident and other parts are actually system components. Many software programs use them without you being even aware. When you "disable the Browser", you only disable the Browser frontend, the GUI. All other parts stay active in the system and must be updated!

Those parts still get patched, the support just ended for what you call "the browser frontend". Which is fine, because I never used that.

The point is: Does the WSUSoffline updater 10.4 just install the stuff, the WU agent lists as missing or does it force additional software on my system (while opening new additional security holes)?

[Joe]

Just to clarify: All I need is an offline updater, which installs the security updates listed inside wsusscn2.cab - the same thing the official Windows Update GUI or a WSUS server does.

As a professional don't need an automatic web browser/.NET framework/Power Shell/Anti-Virus/Remote Desktop/Silverlight installer any other "comfort" hand-holding functions, especially if there is no choice to disable them. By choosing an unofficial third-party offline update installer, you already must know how to secure a Windows installation manually on your own. If you don't have the required knowledge, you have to enable Automatic Updates and let Microsoft decide, because in fact this is the only officially supported way.

[boco]

In the [Miscellaneous] section of UpdateGenerator.ini, there is an "Excludestatics" option. Switching that to "Enabled" will switch off all statically defined packages (IE, MSSE, LiveEssentials etc.). Essentially it leaves only the pure dynamic updates from wsusscn2.cab.

[Denniss]

I don't like this mandatory IE installation. User should get a big warning message but not be forced to install IE11, especially on Server systems.

[aker]

I agree with Denniss. IE11 could cause problems in third party apps, so it shouldn't be installed automatically.

[WSUSUpdateAdmin]

Hi.

The vendor doesn't support the legacy browsers any more, including their web, network and system components.

Who am I to ignore this fact?

It's just like a deprecated Operating System, I think.

RTW