/build/static/layout/Breadcrumb_cap_w.png

Need to block Internet Explorer 9 & 10 installation

I need the best way to ensure that IE 9 and IE 10 cannot be installed via KACE patching to specific groups of machines. What kind of SQL can I add to my queries to exclude IE 9 and 10 from exisiting queries? Is there a way to stop the machine from accepting/installing IE 9 and 10 altogether?

By now you're thinking: "Why in the world does he want to block a newer, and presumably more secure browser from being installed in his environment?"Well, our app team built an app that only runs on IE8, and if 9 and 10 are let loose then we are halting business...

Any thoughts would be appreciated.


0 Comments   [ + ] Show comments

Answers (1)

Answer Summary:
IE9 & IE10 will only be installed if you have the "Software Installers" option checked in your patch subscription. Updates will be applied if the machine happens to have it, but will not be automatically added via KACE. Also, if it's a concern you can use the "Toolkit to Disable Automatic Delivery of Internet Explorer 9/10" using the following links: http://www.microsoft.com/en-us/download/details.aspx?id=179 http://www.microsoft.com/en-us/download/details.aspx?id=36512
Posted by: dugullett 10 years ago
Red Belt
0

IE 9 & 10 should both be software installers. Do you have those settings checking in your subscription settings?

 

Also take a look at these.

http://www.microsoft.com/en-us/download/details.aspx?id=179

http://www.microsoft.com/en-us/download/details.aspx?id=36512


Comments:
  • I don't have Software Installers selected. That's the only way they are on the Patch Listing? - easterdaymatt 10 years ago
    • Yes. You may have some users that have gotten it from other means if they are admins. If that's the case Kace will patch those. That may be what you are seeing. If it detects 10 it will patch 10 depending on your labels. - dugullett 10 years ago
      • You can do a search for Internet Explorer 10 in your patch listing. See if it's active. - dugullett 10 years ago
      • There are things like "Internet Explorer 10 for Windows 7 Service Pack 1' but that's just an update to IE 10 if it's installed, right? - easterdaymatt 10 years ago
      • Yes. If it detects it has IE 10 and needs that patch it will run. - dugullett 10 years ago
      • The ID should say IE10 for the actual software installer. - dugullett 10 years ago
  • We also run into this issue with windows automatic updates and have configured a ie 9 and ie 10 gpo blocker as ie 9/10 is incompatible with some information systems we use. - Jbr32 10 years ago
  • If it helps

    Offline k-scripts offer a GUI logical flow builder and run at machine time as a local system account and don't require a amp connection.

    Online k-scripts run on Kbox time, require a amp connection, run as any user, GUI builder
    Online shell scripts is a straight up scripting window - Jbr32 10 years ago
  • Have you looked into browser compatibility?

    Most websites break in higher IE versions not because the code is actually an issue. It's just developers forgot to put in their pageheaders the required browser mode.

    You could test that with an install for IE10 and play around with the settings in the F12 developre mode and play around with the Browser Mode settings.
    Once you find a working setting you can push these out to your clients through policy making sure they render your legacy page in the correct format on a modern browser.

    http://windows.microsoft.com/en-us/internet-explorer/use-compatibility-view#ie=ie-10 - EVEEN 10 years ago
  • On 9/10/2013:
    Internet Explorer 10 for Windows 7 Service Pack 1 (KB2870699)
    Internet Explorer 10 for Windows 7 Service Pack 1 x64 (KB2870699)
    appeared in our Patch Listing as part of the latest Patch Tuesday. I make it a habit to review the new list everytime and set to Inactive. Our enviornment is also set that we have Automatic Windows Updates completely disabled and rely on Kace to completely manage all patching.

    We also have a bunch of online apps which dont play well with 10. 9 is a little more hit and miss. - tsfr 10 years ago
    • Aren't those files just updates for the existing installation of IE10? I can't find anything in those updates that show that it will install IE10. I hope they don't, but I can't see how they would. - easterdaymatt 10 years ago
  • My thinking was that everything else came over and "Update for" and these didnt. Just made me a little nervous. - tsfr 10 years ago

Don't be a Stranger!

Sign up today to participate, stay informed, earn points and establish a reputation for yourself!

Sign up! or login

Share

 
This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ