Mandatory installation of most recent Internet Explorer

[FrankH]

Hi FrankH,

Was about to write exactly the same thing
Could you share which parts of the doupdate.cmd you deleted/commented out?

Thanks!

Hi smeijer,

not that difficult really. Just edit the script "wsusoffline\client\cmd\doupdate.cmd", and find the line following lines:

Code: Select all

rem *** Install Internet Explorer ***
if "%OS_SRV_CORE%"=="1" goto SkipIEInst
echo Checking Internet Explorer version...


Then change it to the following:

Code: Select all

rem *** Install Internet Explorer ***
rem if "%OS_SRV_CORE%"=="1" goto SkipIEInst
rem echo Checking Internet Explorer version...
echo Skipping mandatory Internet Explorer 11 Installation...
goto SkipIEInst


This will cause the script to simply skip the entire IE installation process. Of course if you allow wsusoffline to update itself, this change will be lost.

[WSUSUpdateAdmin]

Hi.

Maybe we should have a "/skipie" switch or similar for that?

RTW

[aker]

Additionally maybe.
Because IE's base runtime is used in more applications than IE itself, a disable-IE-after-update-if-it-was-disabled-before function would improve the systems security (by updating IE), but also keeps IE disabled.

[WSUSUpdateAdmin]

So how to detect enabled/disabled state and disable IE?
DISM only?
Suggestions welcome!

[aker]

Determine state: DISM and existance of iexplore.exe in "C:\Program Files\Internet Explorer\".
Setting state: I currently just know, that dism is able to disable features from command line. There might be another way I don't know about.

[FrankH]

Looks like DISM is the way to go, at least according to Microsoft. Found the following in the Microsoft Script Center: https://gallery.technet.microsoft.com/s ... t-e8327b13.

The PowerShell script that is offered for downloading will detect, enable, or disable IE under Windows 7. Everything you need should be in there.

[WSUSUpdateAdmin]

Done ( http://trac.wsusoffline.net/browser/trunk (r744)):

- DoUpdate.cmd script will now support "/skipieinst" switch to avoid mandatory installation of most recent Internet Explorer (Thanks to "Joe", "FrankH", "smeijer", "jbegarek", "mAsTa", "boco", "Denniss" and "aker")
- UpdateInstaller.ini file will now support "skipieinst" setting in [Installation] to control "/skipieinst" switch for DoUpdate.cmd script
- Fix: DoUpdate.cmd script will now only install most recent Internet Explorer if IE feature was not disabled before (Thanks to "Joe", "FrankH", "smeijer", "jbegarek", "mAsTa", "boco", "Denniss" and "aker")

RTW

[FrankH]

Awesome, thanks!

[Aaron]

Hi guys,

I am in a situation as above where we cannot allow the install of IE11 yet until the systems I use are updated to work with it.

I am looking at the above and have opened the files with notepad++ but I am not sure how go about editing in the switch to enable the skipping of IE11.

is this only possible if I update WOU from an older pack that previously had the IE tick box unchecked?

[boco]

Depends on how you run the Installation.

Scripted by running DoUpdate.cmd directly: You need to specify the switch on the commandline, together with the other desired switches.
Interactive using UpdateInstaller.exe: Edit the UpdateInstaller.ini file and add the (or edit an existing) line under the [Installation] section so it looks like:

Code: Select all

skipieinst=Enabled