Thursday, November 02, 2006 6:41 AM
sandi
IE7 is being offered as a high priority update via Automatic Updates
Remember, IE7 will only be offered to users who are running with local administrator rights.
Also, IE7 will not download and install silently, even if the user has local admin rights and AU is set to download and install updates automatically. Instead, the user will see a large window advising that IE7 has been downloaded and is available to install. At this stage the user will be given three choices; install, don't install, or install later.
If the user chooses install, the system will have to go through Windows Genuine Advantage validation and then install IE7. If a beta or RC is installed, it will be removed first, and the system will have to be rebooted before the installation proceeds.
If you choose don't install, IE7 will still be available as an optional update via Windows Update, Microsoft Update and the Download Centre.
If you choose install later, the user will be offered IE7 again at a later time.
Internet Explorer 7 will be offered as a high-priority update if a local admin user has Automatic Updates enabled or if they perform a manual scan for updates using the “Express” install option on the Windows Update or Microsoft Update sites. It will also be offered as a recommended update to a local admin user who performs a manual update scan on the Windows Update and Microsoft Update sites using the “Custom” install option.
If you are responsible for a corporate network and want to be sure that IE7 is not offered to your users as a High Priority Update via Automatic Updates, or via the “Express” install option on the Windows Update/Microsoft Update sites you can set a registry kill-bit as follows:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Setup\7.0
“DoNotAllowIE70”
When the key value name is set to 0, or does not exist, distribution is not blocked.
When the key value name is set to 1, distribution is blocked.
Alternatively, you can use the Blocker Toolkit that has been released by MS. The Blocker Toolkit contains an executable blocker script and a Group Policy Administrative Template (.ADM file), and will prevent machines from receiving Internet Explorer 7 as a high-priority update via Automatic Updates and the “Express” install option on the Windows Update and Microsoft Update sites.
IMPORTANT NOTE: The Blocker Toolkit will not stop users who are local administrators from manually installing Internet Explorer 7, whether it be as an optional Recommended update from the Windows Update or Microsoft Update sites, by downloading it from the Microsoft Download Center, or by installing it via external media. Also, Internet Explorer 7 can still be deployed using SUS, WSUS, SMS, and other methods even if the blocking mechanism is activated.
The Blocker Toolkit can be downloaded from the following URL:
http://www.microsoft.com/downloads/details.aspx?FamilyId=4516A6F7-5D44-482B-9DBD-869B4A90159C&displaylang=en
Thanks Kathleen for the screenshot (the screenshot may drop to bottom of screen on smaller monitors):
Filed under: Internet Explorer 7