Internet Explorer MSI

I'm using Wise 4.62.

I need to deploy IE6 SP1 silently on a large number of machines and need the opinions of an experienced packager to help put me on the right trail.

I've tried packaging IE6 just using snapshots, but it runs into problems when trying to update Windows protected files.  I've now resorted to including the original ie6setup.exe and all its cab files in my MSI and simply running them, but I'm not sure if this is ideal.  Is there any way to make the MSI ignore all that protected files bullsh*t, or to make it run with admin privileges?

And what is the best way to deploy IE6 security updates?

Thanks.

(I'm giving many, many points for this question, so please give me a comprehensive answer.  No opportunists, please)
LVL 1
_Canidae_Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

dis1931Commented:
I believe you will find it easier and more cost effective to use MS provided solution:

http://www.microsoft.com/windows/ieak/default.mspx
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
_Canidae_Author Commented:
All the IEAK does is allow you to create a custom installation, and what it compiles is an ie6setup.exe and collection of CAB files... two things that I already have!  (see question... "I've now resorted to including the original ie6setup.exe and all its cab files in my MSI and simply running them, but I'm not sure if this is ideal.")
0
dis1931Commented:
I did read it but assumed you were doing this manually.  IEAK will allow you to customize IE anyway you want and include only necessary cabs depending on what options you want to install.  This is the most ideal solution I have ever seen for deploying IE.  It can be a silent install assuming you choose that option from IEAK.  I think it is advantageous to just placing all cabs in the folder and copying the install and running it.  It will allow for more customization.  Yes this can certainly be configured manually but creating an inf file that does all that IEAK can do is failry hard and time consuming...Just a thought I realize it may be similar to what you already have but it will be a little less work and will be more customized.  I am sure it is possible from past experience to package nearly anything but many times it is not worth the time and effort if there is a comparable solution such as using IEAK and running the install from any means you choose whether it be locally or remotely.

Dis
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

_Canidae_Author Commented:
If I used this, how would it be deployed?  Needs to be automatic and silent to 500+ users.
0
pyrite504Commented:
When you finish with answering all the questions in IEAK, you can roll it all into one big .exe file (Which is what I did.)  then you can copy the .exe to all the workstations or mount it to a network location, and build a .MSI to just run the .exe, or you can create a login script to automatically run the file on login.  It might take some time this way (our custom IE deployment took about 5 minutes to run) but it will deploy.
0
talphiusCommented:
In order to push via policy, you have to use the MSI Wrapper.  To use it, you'll need to use the IEAK (as recommended above) to create a customized version that includes the User Rights Deployment feature (so that users do not have to be Admins), and then you use the wrapper to install using GPO...


See the following articles:
MS #296702 - http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3BQ296702
MS #810011 - http://support.microsoft.com/kb/810011/EN-US/
MS #290090 - http://support.microsoft.com/kb/260090/EN-US/
0
dis1931Commented:
It will create an executable that is silent however the only problem I have found is that there is no way to specify it to not reboot PC.  Though in all honesty I haven't tried very hard.  When I implemented it, it was in a login script that asked the user to wait and not close the window and that the PC would reboot.  The script checked for a particular file's date, if it was the correct date it didn't do anything but if it wasn't it installed the update.  It could be done in the logoff script as well just ask users to reboot and not wait for their PC to turn off as software will install.

Actually after toying with it I found out how to stop the reboot.

The command below will prevent reboot...of course replacing the directories with the appropriate directories or network shared drives.  I would suggest running this command from the directory where ie6wzd exists.  It may be easier to move the ie6wzd file to the same directory as the setup file.  I ran this command from the default install location of the IE6wzd which is under the IEAK6 directory in the Tools folder.  It does prevent the reboot...This uses what MS calls IEXPRESS you can read more about it and find this syntax from the help file that downloads with IEAK6.  

C:\builds\10272004\FLAT\WIN32\EN\ie6setup.exe /R:N /c:"ie6wzd"

As for how to run it you can also create an MSI to just run the setup which I think is what you were doing or using a login/logoff script.  You can use utilites like psexec or another remote command execution program to execute this command on any PC that you needed.  The only thing you would need is a list of PCs.  then setup the appropriate syntax and test it out first before deployment.

Dis
0
dis1931Commented:
As suggested by talphius, another good feature of IEAK is that you will be able to choose an installation that will work despite the logged in user not having admin rights.  IEAK is pretty self explanatory and will tell you what each feature does when you choose it and has a help file to go with it.  An MSI wrapper would work as well and then you could deploy it through WISE or Group Policy
0
_Canidae_Author Commented:
Thanks for all your comments.

I'm going to go off and try all these suggestions.

As a programmer who's been roped into filling in for this damn packaging since our build expert left, I've found the IE6 deployment a bloody nightmare as my first assignment!!!
0
_Canidae_Author Commented:
I can't find a way to include this User Rights Deployment feature that was mentioned.  Will keep looking...
0
dis1931Commented:
There are a couple of sections in the IEAK6 wizard that mention whether users have admin rights or not, this is what it is referring too.

0
_Canidae_Author Commented:
I'm got the checkbox checked for "Enable logon after restart with user-level access", which then mentions that this option should be used for installations with users who don't have admin rights.  That's all I've found, and it hasn't helped, unfortunately.  Setup won't run.
0
_Canidae_Author Commented:
Oh, forgot something...

I've also selected "Display the Subset of IEAK policies for Non-Admin users"
0
_Canidae_Author Commented:
The restricted desktops here just don't seem to like this package, they refuse to run it.
0
talphiusCommented:
You read through the deployment guide?

http://support.microsoft.com/kb/810011/EN-US/#4
0
talphiusCommented:
0
_Canidae_Author Commented:
Just wanted to let you guys know I've not abandoned this question.

I haven't worked on the IE problem in a good while now, having thankfully gone back to my development role, but am looking at it again today and will award points soon.
0
_Canidae_Author Commented:
Thanks for your help, you two, and sorry for the delay in awarding points.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Networking

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.