Internet Explorer 7 automatic installation via WSUS today

You may find that your XP and Server 2003 machines running Internet Explorer 6 are upgraded to version 7 today if you have a certain set of things in place:

  • You use WSUS to manage updates in your organization.
  • You have Windows XP Service Pack 2 (SP2)-based computers or Windows Server 2003 Service Pack 1 (SP1)-based computers that have Internet Explorer 6 installed.
  • You have configured WSUS to auto-approve Update Rollups for installation (this is not the default configuration)

If for some reason you do not want to install Internet Explorer 7 (such as it causes problems with an intranet or extranet application) then you need to take some remedial action to prevent this installation from taking place. Read on to find out how to check if this will happen and stop it if this is not what you want.

As described in Microsoft KB article 946202:

If you have configured WSUS to automatically approve Update Rollups for installation, but you do not want to automatically install Windows Internet Explorer 7 via WSUS when it is released on February 12, 2008, you will need to disable this auto-approval rule before February 12, 2008. Once the rule is disabled, you can synchronize the Windows Internet Explorer 7 package to your WSUS server by using the steps outlined below. Once the Windows Internet Explorer 7 package has been synchronized to the server, it will not be automatically approved when you switch your auto-approval rule back on. The steps that are described below are for the WSUS 3.0 UI. Steps for the WSUS 2 SP1 UI are similar, but the steps use the older Web UI.

Action to Take Before February 12, 2008

These steps will temporarily modify the auto-approval that you may have created to ensure that packages classified as Update Rollups are not automatically approved for installation. These steps are the steps for WSUS 3.0. For WSUS 2.0 please refer to the product documentation.

1. Click Start, click Administrative Tools, and then click Microsoft Windows Server Update Services 3.0.

2. Expand ComputerName, and then click Options.

3. Click Automatic Approvals.

4. Click the rule that automatically approves an update that is classified as Update Rollup, and then click Edit.
Note The properties for this rule will resemble the following:

  • When an update is in Update Rollups
  • Approve the update for all computers

5. Click the Update Rollups property under the Step 2: Edit the properties (click an underlined value) section.

6. Clear the Update Rollup check box, and then click OK.

7. Click OK to close the Automatic Approvals dialog box.

Note If you do not see a rule that resembles step 4, you have not configured WSUS to automatically approve Update Rollups for installation. Therefore, no further action is required.

Actions to Take After February 12, 2008

The steps above ensure Windows Internet Explorer 7 is not automatically approved for installation. In the following steps, you will manually synchronize the new Windows Internet Explorer 7 package to your WSUS server so that when you re-enable auto-approval for Update Rollups it will not be installed. These steps are the steps for WSUS 3.0. For WSUS 2.0 please refer to the product documentation.

1. Click Start, click Administrative Tools, and then click Microsoft Windows Server Update Services 3.0.

2. Expand ComputerName, and then click Synchronizations.

3. Click Synchronize Now.

4. Expand ComputerName, expand Updates, and then click All Updates.

5. Choose Unapproved in the Approval dropdown.

6. Ensure that Windows Internet Explorer 7 is listed as an unapproved update.
Note There may be multiple updates listed depending on the language and operating system updates you imported.

For most people, this will be a non-issue – maybe you don’t use WSUS (home users and small businesses typically use Windows Update, large enterprises more likely to use SMS or SCCM); or your WSUS configuration does not auto-approve update rollups; or the new version will install and give you a better and more secure browser without any problems with sites that you use.

About ukcrmguru
I'm an MVP for Dynamics CRM, consultant, Microsoft Certified Trainer and self-confessed geek. I also lead the UK CRM User group when I'm not too busy with all that.

Comments are closed.

%d bloggers like this: