IE7 Internet Explorer 7 as critical high priority update adm GP

Not an automatic download it can be disabled via gpo


When I was born I was so suprised I didn't talk for 18 months

I just wrote a GPO blocking all updates (unless installed by the IT team, at least WE can have it not install) until we can fully test it. We figured it would be a month or two after release before they pushed it out. Guess that'll teach us to wait till the last minute.

We'll probably wait a few weeks before we start rolling it out to our users.

Cheers
Rob

i used it for a breif minute and in that minute IE 7 SUCKS

I dunno... I kinda like IE7. I'm running it on all my machines now.

I *love* the tabbed browsing (Yes, I know... FireFox)...



Just my 2¢

"When I die, I want people to say 'There was a wise man' instead of 'Finally, his mouth is shut!'" --Me
--Greg

Oh come on now.. IE7 isn't all that bad... I'm a firefox 2.0 user but there are just some websites that don't like firefox....

I think they are going in the right direction with IE and I hope that firefox in the near future adapts some of the things that are in IE7


...and about the critical update thing.... I think that was only made because of the phishing protection and other things now integrated into IE7 that would help "the average home user" .... now as for a corp. I know that we have blocked it from our wsus server and it's easy enough to block/prevent.

Looks like Microsoft in their great wisdom has chosen to make IE7 a critcal high priority udpate which means all computers that have automatic updates enabled and set to download and install, are going to get IE7.

Click to expand...

This is not true. It is not a "critical" update. Nor will it be automaticly installed, no matter what your Windows Update settings may be.

Options for Blocking Automatic Delivery

Microsoft recommends that organizations who are using Automatic Updates in their environments and wish to prevent users from automatically receiving Internet Explorer 7 take one or more of the following steps:

1. Download and deploy the Internet Explorer 7 Blocker Toolkit.

The non-expiring Blocker Toolkit (available from the Microsoft Download Center here: includes both a Group Policy template and a script that set a registry key to prevent Automatic Updates and the Windows Update and Microsoft Update sites from offering Internet Explorer 7 as a high-priority update.

(Note: The Blocker Toolkit will not prevent users who are local administrators from manually installing Internet Explorer 7 from, for example, external media or the Microsoft Download Center.)

2. Deploy an update management solution that provides full control over the updates deployed to computers in your network. Microsoft offers the free Windows Server Update Services and the more advanced Systems Management Server 2003 update management products. IT Administrators using an update management solution should use the standard features of their product, rather than the Blocker Toolkit, to control Internet Explorer 7 distribution.

3. Prevent users from running as local administrators on their computers. Users who are not local administrators will not be offered the update and can be restricted from manually installing Internet Explorer 7 (or any other application).

4. Instruct users to decline Internet Explorer 7 when Automatic Updates notifies them that the update is available to install. If the above options are not feasible for your organization, you can also instruct your users to choose “Don’t Install” when prompted by the Internet Explorer 7 welcome screen. Users will not need to take special action to receive notification, and all users will have the ability to decline installation.



____________________________
Users Helping Users

Is there a way to set it back to classic interface and toolbars?"

Right-click on any on any free area on the current Toolbars and select Menu Bar from the resulting drop down menu. This will give you the File, Edit, View, etc. under the new Address Bar.

If you want to move the Menu Bar to above the Address Bar this Registry amendment is being suggested by some but I have not played with it.

Put the info below in notepad and save as toolbar.reg

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"ITBar7Position"=dword:00000001

You can force IE7's menu bar to the Top (or undo). Requires restart.

You can hide IE7's search box (or undo). Requires restart.
See:
If using XP Pro:

Start, Run, gpedit.msc

User Configuration
\Administrative Templates
\Windows Components
\Internet Explorer

"Prevent the Internet Explorer search box from displaying"
Set to ENABLED

For other OS versions:
I should note for non-XP Pro users that the Group Policy object that is created and effected by the suggestion above could be modified by hand using Regedit. (You need to add the new key). In ".REG" file format that could also be used the setting can be found here:

REGEDIT4

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions]
"NoSearchBox"=dword:00000001

Click to expand...

____________________________
Users Helping Users

i like the original look of IE6 with the file bar and all that
i dont mind the tab fuction i just like to have the file bar there and fyi you can use aolbrowser for all firefox hating sites

FYI the AOL-Browser renders with the IE Engine, so in effect it is IE...

BTW. FireFox does have an extension (Add-On) called IE Tab, which uses the IE Engine to render any webpage you like with FF...

lets not get this into a flame war etc. since it is everyones personal preference to use the browser of their choice... and yes I am a FireFox user (both on XP and Linux)...

Ben

"If it works don't fix it! If it doesn't use a sledgehammer..."

Ah good good. I just freaked out as normally high priority updates are auto installed. This is also the case for IE7 but what starts is their option window which is good in the sense that it just does not auto install, however the option is left up to the user, which is very not good. I will implement the blocker utility until the apropriate time.

Is there an ADM file released yet to GPO the IE7 settings as I asume there are newer ones especially in the control of the interface?

Thanks for everyones comments.

Jason

Opps, should have read further, the blocker toolkit is the adm.


Additional Information
Toolkit Components:

The toolkit contains two components:

An executable blocker script
A Group Policy Administrative Template (.ADM file)


Group Policy Administrative Template (.ADM file)
The Group Policy Administrative Template (.ADM file) allows administrators to import the new Group Policy settings to block or unblock delivery of Internet Explorer 7 into their Group Policy environment, and use Group Policy to centrally execute the action across systems in their environment.

After adding this administrative template to the Group Policy Editor you must uncheck the "Only show policy settings that can be fully managed" in the Filtering dialog before the new policy becomes visible in the Group Policy Editor. This option is found by highlighting "Administrative Templates", then selecting "View" then "Filtering". You will then see the policy under "Computer Configuration / Administrative Templates / Windows Components / Windows Update / Automatic Updates Blockers". This setting is available only as a Computer setting; there is no per-User setting.

Note: This registry setting is not stored in a policies key and is thus considered a preference. Therefore if the Group Policy Object that implements the setting is ever removed or the policy is set to "Not Configured", the setting will remain. To unblock distribution of Internet Explorer 7 using Group Policy set the policy to "Disabled".




Jason

Thanks "BadBigBen", I would like more info on what you described. And to be more realistic, AOL uses the IE platform but adds their own skin to it. I am an avid mozilla/firefox user, mozilla is my default browser, but I also use firefox for different things. There was a time when MS would not let you use anything other than IE to access their site, but that has changed now. But I still do not like IE7, I tried the beta but did not like it. So I uninstalled 7 and reinstalled 6 for the time being.
Just my 2 cents worth.

There are several skins available for IE 7.
There are big fans of Maxthon, now IE 7 compatable.
There are big fans of Avant, which is compatable as well.



____________________________
Users Helping Users

@Janesman2006 - you can read up on the Extension at the following website:
I am like you, tried IE7, did not like it, uninstalled it again... but that is my own preference...



Ben

"If it works don't fix it! If it doesn't use a sledgehammer..."

Has Adobe fix the issue were you cannot update adobe products with IE7?

I have not tested that lately... but it was a huge issue with the Beta IE7

Flash, Dreamweaver, Macromedia generally, Adobe Reader and Adobe Download Manager all work under IE 7.

What product were you concerned with?


____________________________
Users Helping Users

The LOL the error that is specific to the Adobe updater is a "No Connection" I had this issue with multiple computers. the fix was to uninstall IE7 then the updater worked like a champ. I have not tested to see if this is still the case with the final of IE7?

I suppose I could go check and see if this is still an issue. I do not have IE7 installed in the primary computer that I do my Photoshop picture editing on because of that error in all the previous editions of IE7

Smak! (my forehead) I was being lazy.....LOL

answered my own question