Solved

ieak - 1st time deploy questions

Posted on 2004-09-16
9
2,367 Views
Last Modified: 2008-03-17
New to ieak and have questions.

I want to use ieak to create N user based profiles defining
content - approved sites.  I created a custom installation
(flat) with the customization wizard and installed
it on a client pc using the run window.  
Obtained it from \ieak\builds\09162004\FLAT\WIN32\EN\ie6setup.exe.
Worked just great.  Setup was silent install and reboot was
automatic.

? Can this setup be called from the last line of a login script
without problems?  All users already have ie6 installed.
Most are local administrators of their box.

? There was also another directory structure
\ieak\builds\09162004\INS\WIN32\EN, which I assume is the
directory that hold the 'custom' profile information.  Is
that correct?

? To use the ieak profile manager must you first build and
install an ieak built ie distribution?  Assume you must.

? When I went into the ieak profile manager to tweek the
approved sites, I started by selecting the install.ins
in the directory \ieak\builds\09162004\INS\WIN32\EN.
After modifying the list in "Security Zones and Content Ratings"
I went to save it; File->Save As. The dialog insists that
I enter a URL path to cabinet files.  Must I?  I must, or
it won't save, but I was hoping custom profile could be
applied in a login script that used a \\server\share\path
form.  Do I have to have a web server running to do this
profile thing?

? Should I save each profile in the same directory but
with a new name?

? Once setup how can I apply a custom profile to the browser.
I can determine who the user is and so choose which ins
to select.  Once I've determined which profile/ins I want, how
do I invoke it within the batch?

Customization Wizard - Stage 2 - Automatic Version Sync...

? I get a whole list of out of date components (yellow !).
On the right are three buttons, all greyed out.  Why
can't I Upgrade, Synchronize or Synchronize All?
All our systems are maintained with SUS (which works
fine).  I am the adminstrator of this PC.

Thanks
0
Comment
Question by:hank1
  • 7
  • 2
9 Comments
 
LVL 27

Accepted Solution

by:
Asta Cu earned 200 total points
ID: 12084456
Not my cup of tea, but a few thoughts, in case they help (and links).

Which version?  Is it IEAK 6 SP 1?  What end-user versions, do they include XP SP2?  
http://www.microsoft.com/windows/ieak/evaluation/winxpsp2.mspx

For the above, deployment guide
http://www.microsoft.com/windows/ieak/techinfo/deploy/60/en/appendix.mspx

The above include things like downloading, and other features (APIs) which have changed in XP 2 and perhaps part of the roadblock, such as:
Windows XP Service Pack 2 changes the prompts that are used for file downloads, mail attachments, shell process execution, and program installation


0
 
LVL 27

Expert Comment

by:Asta Cu
ID: 12084467
Windows Update Setup fails on a user's machine
If Windows Update Setup fails, you can troubleshoot errors using the Active Setup Log.txt file. The Active Setup Log.txt file is a log of the entire setup process from the moment IE6Setup.exe is executed until the download of the last .cab file is complete.

When IE6Setup.exe is executed, Active Setup Log.txt is created in the folder where Windows is installed (typically, the C:\Windows folder). If an Active Setup Log.txt from a previous Internet Explorer Setup session exists, it is renamed to Active Setup Log.bak.

The log begins with the date and time Setup was launched and ends with the date and time it successfully downloads the last .cab file. As you go through the Setup wizard, logging entries are continually written to this file. It is the most informative log file for determining what caused a download failure and when the failure occurred. Most entries logged in this file are also written to the registry; this data is recorded to assist with safe recovery.

The error codes can help you determine what Setup was doing when it failed and also help you determine the cause of the failure. For information about the error codes, see Error Log Information for Active Setup Log.txt.
More here...
http://www.microsoft.com/windows/ieak/techinfo/deploy/60/en/appendix.mspx
0
 
LVL 27

Expert Comment

by:Asta Cu
ID: 12084483
Last entry here by me today, off to work:

Troubleshooting Problems Using the Internet Explorer 6 Customization Wizard
If you are not able to locate specific screens in the Internet Explorer 6 Customization Wizard, check the following:

• Make sure you selected the correct role (Internet content provider (ICP), independent software vendor (ISV), Internet service provider (ISP), or corporate administrator).
 
• Make sure you selected the correct operating system.
 
• On the Feature Selection screen, make sure that all the features you want to customize are selected. Screens for a feature are not displayed if the check box for it is not selected.
 
• For Outlook Express customization, verify that you downloaded Outlook Express files and added Outlook Express to at least one of your installation modes.
 

Note - • If you are setting up a silent installation or running the Internet Explorer 6 Customization Wizard from the Office Installation Wizard, some customization options are not available.
 
Source: http://www.microsoft.com/windows/ieak/techinfo/deploy/60/en/appendix.mspx
0
 
LVL 1

Author Comment

by:hank1
ID: 12084660
I've decide that experimentation is best.  Got a few lab machines
and will mess about until I understand this thing.  Nobody, even the
"certifieds", have any clue about half this stuff.  Thanks
0
How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

 
LVL 27

Expert Comment

by:Asta Cu
ID: 12084691
Adventuresome spirit; me too.  With all the end-user variables, the issues are definitely complex.  Even though you may not choose to go the IEAK customization and rollout route, the links can be quite informative in exploring the roadblocks and possibilities.

At any rate, good luck to you.

Asta
0
 
LVL 27

Expert Comment

by:Asta Cu
ID: 12084801
One of the links above (can't remember which, sorry) .... talked about IEAK issues and recommendations when doing Silent Installs (may be part of the problem here)....  This based on your comment above:  "Setup was silent install and reboot was
automatic."
0
 
LVL 1

Author Comment

by:hank1
ID: 12138954
This can't be done without the most bazzar hacking.
I'm surprised that dynamic updating like this, based on
the USER, is not practical.  Given the central role our
browser plays and the bullets that it contains ... it's just
amazing.  There doesn't even seem to be a simple wmi
interface for control either.
0
 
LVL 27

Expert Comment

by:Asta Cu
ID: 12142073
I wish I had more time this month; up to my eyes in backlog.  Also wonder if perhaps checking the MS TechNet site or their Forums for these customizations would get any insights and/or serve to escalate and get some help from those groups.
0
 
LVL 27

Expert Comment

by:Asta Cu
ID: 12142230
I've been exploring IEAK details as they pertain to changes in, for example, XP sp1 and SP2, and one interesting characteristic/change deals with URL Mime Sniffing, and some other findings that intrigued me so sharing these.  Eventually, my guess is that eventually most of us who haven't already dared to move from XP SP1 will move to SP2 (if/when some of the kinks and roadblocks are resolved and other vendors take the compatibility actions to ensure smooth sailing).  Anyway, here are some of the results of my research that I mention here.

The first link includes (excerpts):
 New Internet Explorer Features
 Download, Attachment, and Authenticode Enhancements
 Add-on Management and Crash Detection
 Binary Behaviors Security Setting
 BindToObject Mitigation
 Information Bar
 Feature Control Security Zone Settings
 Local Machine Zone Lockdown
 MIME Handling Enforcement
 Object Caching
 Pop-up Blocker
 Untrusted Publishers Mitigations
 Window Restrictions
 Zone Elevation Blocks
 Network Protocol Lockdown
 New Group Policy Settings Affecting Internet Explorer

http://www.microsoft.com/windows/ieak/techinfo/deploy/60/en/appendix.mspx

Redistributing Internet Explorer

The IEAK can help you redistribute Microsoft Internet Explorer as part of the setup process for another program. For example, if you're an independent software vendor (ISV), you might want to customize the Internet Explorer installation so that your custom program, instead of Internet Explorer, provides Setup choices and feedback to the user.

To redistribute Internet Explorer, use the Internet Explorer 6 Customization Wizard to create an IEAK package. Choose the Content Provider/Developer option in Stage 1 of the Internet Explorer 6 Customization Wizard.

You can customize the appearance and functionality of the browser and Windows Update Setup, if permitted by your license agreement. You can also use the following to control the functionality and user experience of Windows Update Setup:

• Running Setup in Batch Mode  
• Internet Explorer Batch-mode Setup Switches  
• IExpress Batch-mode Setup Switches  
• Working with Setup Information (.inf) Files
To streamline the process of installing and using the IEAK, you no longer need to type your name and 10-digit customization code during installation and setup. Beginning with IEAK 6, you only accept the license agreement and select your role during installation.

Role
Choose the role that matches what you want to accomplish using the IEAK:
• Content provider/developer if you provide custom content, links, and functionality to users  
• Service provider if you provide Internet service to users  
• Corporate administrator if you manage Internet software and services for a company or organization  

 Important
• The role you choose must match the role stated in your license agreement.

---
Customization for Corporate Administrators (also includes details and hyperlink on customizations and brandings)
http://www.microsoft.com/windows/ieak/techinfo/deploy/60/en/appendix.mspx

---
 
Platform SDK: Group Policy
RSoP IEAK WMI Classes Illustrated
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/policy/policy/rsop_ieak_wmi_classes_illustrated.asp


Back to work, will return when I can.

":0) Asta
 

 
0

Featured Post

Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

Join & Write a Comment

Suggested Solutions

Problem I downloaded the Microsoft Internet Explorer 9 Beta, today, to give it a test drive and maybe write a review for the site, and it failed miserably and got stuck in a crash restart loop. The error message given is as illustrated below i…
Introduction If you're like most people, you have occasionally made a typographical error when you're entering information into an online form.  And to your consternation, the browser remembers the error, and offers to autocomplete your future entr…
This Micro Tutorial will demonstrate how to add subdomains to your content reports. This can be very importing in having a site with multiple subdomains.
This Micro Tutorial will demonstrate how nuggets on the Web are formatted by using Chrome Developer Tools. These tools would not only view the site's CSS but it can also modify it and save the CSS to use on your own site.

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now