|
|
|
 Toolkit to Disable Automatic Delivery of Internet Explorer 8Brief DescriptionThe Internet Explorer 8 Blocker Toolkit enables IT Administrators to disable automatic delivery of Internet Explorer 8 as a high-priority update via Automatic Updates and the Windows Update and Microsoft Update sites. On This PageQuick Details
OverviewTo help our customers become more secure and up-to-date, Microsoft will distribute Windows Internet Explorer 8 as a high-priority update through Automatic Updates for Windows XP Service Pack 2 (SP2) and higher, Windows XP Professional x64 Edition, Windows Server 2003 SP2 for x64 and x86, Windows Vista for x64 and x86, Windows Vista SP1 for x64 and x86, and Windows Server 2008 for x64 and x86. This Blocker Toolkit is intended for organizations that would like to block automatic delivery of Internet Explorer 8 to machines in environments where Automatic Updates is enabled. The Blocker Toolkit will not expire. Note:
See the "Additional Information" section below for detailed instructions on configuring and deploying the Blocker Toolkit. The same information is also provided in the Help file included in the download. Answers to Frequently Asked Questions can be found here. System Requirements
InstructionsClick on the link to download the package and select ‘Open’ to run the package. You will be asked to accept the end-user license agreement (EULA) before you gain access to the package components. Additional InformationToolkit Components:
The toolkit contains two components:
Blocker Script The script creates a registry key and sets the associated value to block or unblock (depending on the command-line option used) automatic delivery of Internet Explorer 8 on either the local machine or a remote target machine. Registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Setup\8.0 Key value name: DoNotAllowIE80
The script has the following command-line syntax: IE80Blocker.cmd [<machine name>] [/B] [/U] [/H] Machine Name The <machine name> parameter is optional. If not specified, the action is performed on the local machine. Otherwise, the remote machine is accessed via the remote registry capabilities of the REG command. If the remote registry can’t be accessed due to security permissions or the remote machine can’t be found, an error message is returned from the REG command. Switches Switches used by the script are mutually exclusive and only the first valid switch from a given command is acted on. The Script can be run multiple times on the same machine without problem.
Internet Explorer 8 via Automatic Updates. ------------------------------------------------------------ Usage: IE80Blocker.cmd [<machine name>] [/B][/U][/H] B = Block Internet Explorer 8 deployment U = Allow Internet Explorer 8 deployment H = Help Examples: IE80Blocker.cmd mymachine /B (blocks delivery on machine "mymachine") IE80Blocker.cmd /U (unblocks delivery on the local machine) ------------------------------------------------------------ Group Policy Administrative Template (.ADM file) The Group Policy Administrative Template (.ADM file) allows administrators to import the new Group Policy settings to block or unblock automatic delivery of Internet Explorer 8 into their Group Policy environment, and use Group Policy to centrally execute the action across systems in their environment. After adding this administrative template to the Group Policy Editor, you must clear the "Only show policy settings that can be fully managed" option in the Filtering dialog before the new policy becomes visible in the Group Policy Editor. This option is found by highlighting "Administrative Templates", then selecting "View" and then selecting "Filtering". You will then see the policy under "Computer Configuration / Administrative Templates / Windows Components / Windows Update / Automatic Updates Blockers". This setting is available only as a Computer setting; there is no per-User setting. Users running Windows XP or Windows Server 2003 will see the policy under Computer Configuration / Administrative Templates / Windows Components / Windows Update / Automatic Updates Blockers v2. Users running Windows Vista or Windows Server 2008 will see the policy setting under Computer Configuration / Administrative Templates / Classic Administrative Templates (ADM) / Windows Components / Windows Update / Automatic Updates Blockers v2. This setting is available only as a Computer setting; there is no Per-User setting. Note: This registry setting is not stored in a policies key and is thus considered a preference. Therefore if the Group Policy Object that implements the setting is ever removed or the policy is set to "Not Configured", the setting will remain. To unblock distribution of Internet Explorer 8 using Group Policy set the policy to "Disabled". Answers to Frequently Asked Questions can be found here. What Others Are DownloadingOthers who downloaded Toolkit to Disable Automatic Delivery of Internet Explorer 8 also downloaded: |
