Mandatory installation of most recent Internet Explorer

[Denniss]

Some users can't or don't want to use/install the most recent IE. It should be sufficient to have install IE11 as default in update installer and adding a warning upon disabling this. Same with IE9 on Vista although this should be less of a problem as it's supposed to have better compatibility.
IE9/IE11 may be a problematic in server environments or in companies which have to use older IE for compatibility.

[WSUSUpdateAdmin]

Agreed, Denniss,

I'll add a warning.

Cheers,
Torsten

[FrankH]

First off (since this is my first post), thanks for all the hard work you put into this great update tool. I've been using it in a SMB environment (about 200 PCs) for a few years now to keep everthing updated, without having to use that train wreck called WSUS.

On that note, the new mandatory installation of IE 11 under Windows 7 that you introduced with version 10.4 is a real problem. We don't use IE at all in the company, and it is deactivated in "Programs and Features". Installing IE 11 causes this to be reactived, giving the user access to the browser she's not supposed to have. It would then also force me to manually deactivate the option again for over 200 PCs.

So please include an option to skip this mandatory update, as suggested by Denniss in his last post. As is, I've had to hack the "doupdate.cmd" script to skip the IE installation, which I would have to redo everytime WSUS Offline updates itself. Since I call this script directly as part of the OPSI script that I use to distribute the updates, a command line option such as "/skipieinstall" would be sufficient.

Thanks for your attention, and keep up the great work!

[smeijer]

Hi FrankH,

Was about to write exactly the same thing
Could you share which parts of the doupdate.cmd you deleted/commented out?

Thanks!

[jbegarek]

Hi FrankH,

Was about to write exactly the same thing
Could you share which parts of the doupdate.cmd you deleted/commented out?

Thanks!

Also agree! I use it in an environment where IE 11 is NOT allowed... would be great to be able to turn this off... Thanks for all the work you all do for this great tool!

[aker]

The simple solution would be a FinalizationHook.cmd for the download part, which looks like this:

Code: Select all

del /q ..\..\client\w61\glb\IE*.exe
del /q ..\..\client\w61-x64\glb\IE*.exe


There would be a better solution (auto-disabling of IE), but I currently don't know, which feature has to be disabled.
If someone could post the result of the command

Code: Select all

dism /Online /Get-Features


of a Win 7 System I could write a script, which auto-disables IE again.
Then your IE-runtime would be secure (as it's up2date) and IE is disabled.

[harry]

For a german Windows 7 Ultimate SP1 x86 with activated IE:

Code: Select all

D:\>dism /Online /Get-Features

Tool zur Abbildverwaltung für die Bereitstellung
Version: 6.1.7600.16385

Abbildversion: 6.1.7601.18489

Funktionsauflistung für das Paket : Microsoft-Windows-Foundation-Package~31bf3856ad364e35~x86~~6.1.7601.17514

[...]
Funktionsname : Internet-Explorer-Optional-x86
Status : Aktiviert
[...]
Der Vorgang wurde erfolgreich beendet.


[aker]

@harry
Ändert ein "/format:table" die Ansicht in eine Tabelle (kann es gerade nicht testen).
Bei einem x64-Windows wird es vermutlich dann statt "x86" "x64" heißen.

@WSUSUpdateAdmin
Könnte das IE-Installationsmodil nicht den Status des IE mittels dism prüfen und nach Update wieder entfernen?

Vielen Dank & Viele Grüße

[harry]

For a german Windows 7 Professional SP1 x64 with activated IE:

Code: Select all

C:\>dism /Online /Get-Features /format:table

Tool zur Abbildverwaltung für die Bereitstellung
Version: 6.1.7600.16385

Abbildversion: 6.1.7601.18489

Funktionsauflistung für das Paket : Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514

------------------------------------------- | -----------
Funktionsname                               | Status     
------------------------------------------- | -----------
[...]
Internet-Explorer-Optional-amd64            | Aktiviert

Der Vorgang wurde erfolgreich beendet.


[aker]

Und mit dem Parameter "/English" sollte die gesamte Ausgabe auf Englisch erfolgen. Damit sollte wsusou in der Lage sein, zwischen aktiviert und deaktiviert zu unterscheiden.
When using the parameter "/English" dism should print everything in English, so it is easy for wsusou to check, if a feature is enabled or disabled.