?
Solved

Internet Explorer MSI

Posted on 2004-10-27
18
Medium Priority
?
1,065 Views
Last Modified: 2008-01-09
I'm using Wise 4.62.

I need to deploy IE6 SP1 silently on a large number of machines and need the opinions of an experienced packager to help put me on the right trail.

I've tried packaging IE6 just using snapshots, but it runs into problems when trying to update Windows protected files.  I've now resorted to including the original ie6setup.exe and all its cab files in my MSI and simply running them, but I'm not sure if this is ideal.  Is there any way to make the MSI ignore all that protected files bullsh*t, or to make it run with admin privileges?

And what is the best way to deploy IE6 security updates?

Thanks.

(I'm giving many, many points for this question, so please give me a comprehensive answer.  No opportunists, please)
0
Comment
Question by:_Canidae_
  • 9
  • 5
  • 3
  • +1
18 Comments
 
LVL 10

Accepted Solution

by:
dis1931 earned 500 total points
ID: 12420536
I believe you will find it easier and more cost effective to use MS provided solution:

http://www.microsoft.com/windows/ieak/default.mspx
0
 
LVL 1

Author Comment

by:_Canidae_
ID: 12420883
All the IEAK does is allow you to create a custom installation, and what it compiles is an ie6setup.exe and collection of CAB files... two things that I already have!  (see question... "I've now resorted to including the original ie6setup.exe and all its cab files in my MSI and simply running them, but I'm not sure if this is ideal.")
0
 
LVL 10

Expert Comment

by:dis1931
ID: 12420968
I did read it but assumed you were doing this manually.  IEAK will allow you to customize IE anyway you want and include only necessary cabs depending on what options you want to install.  This is the most ideal solution I have ever seen for deploying IE.  It can be a silent install assuming you choose that option from IEAK.  I think it is advantageous to just placing all cabs in the folder and copying the install and running it.  It will allow for more customization.  Yes this can certainly be configured manually but creating an inf file that does all that IEAK can do is failry hard and time consuming...Just a thought I realize it may be similar to what you already have but it will be a little less work and will be more customized.  I am sure it is possible from past experience to package nearly anything but many times it is not worth the time and effort if there is a comparable solution such as using IEAK and running the install from any means you choose whether it be locally or remotely.

Dis
0
The new generation of project management tools

With monday.com’s project management tool, you can see what everyone on your team is working in a single glance. Its intuitive dashboards are customizable, so you can create systems that work for you.

 
LVL 1

Author Comment

by:_Canidae_
ID: 12421142
If I used this, how would it be deployed?  Needs to be automatic and silent to 500+ users.
0
 

Expert Comment

by:pyrite504
ID: 12421903
When you finish with answering all the questions in IEAK, you can roll it all into one big .exe file (Which is what I did.)  then you can copy the .exe to all the workstations or mount it to a network location, and build a .MSI to just run the .exe, or you can create a login script to automatically run the file on login.  It might take some time this way (our custom IE deployment took about 5 minutes to run) but it will deploy.
0
 
LVL 5

Assisted Solution

by:talphius
talphius earned 500 total points
ID: 12421993
In order to push via policy, you have to use the MSI Wrapper.  To use it, you'll need to use the IEAK (as recommended above) to create a customized version that includes the User Rights Deployment feature (so that users do not have to be Admins), and then you use the wrapper to install using GPO...


See the following articles:
MS #296702 - http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3BQ296702
MS #810011 - http://support.microsoft.com/kb/810011/EN-US/
MS #290090 - http://support.microsoft.com/kb/260090/EN-US/
0
 
LVL 10

Expert Comment

by:dis1931
ID: 12421996
It will create an executable that is silent however the only problem I have found is that there is no way to specify it to not reboot PC.  Though in all honesty I haven't tried very hard.  When I implemented it, it was in a login script that asked the user to wait and not close the window and that the PC would reboot.  The script checked for a particular file's date, if it was the correct date it didn't do anything but if it wasn't it installed the update.  It could be done in the logoff script as well just ask users to reboot and not wait for their PC to turn off as software will install.

Actually after toying with it I found out how to stop the reboot.

The command below will prevent reboot...of course replacing the directories with the appropriate directories or network shared drives.  I would suggest running this command from the directory where ie6wzd exists.  It may be easier to move the ie6wzd file to the same directory as the setup file.  I ran this command from the default install location of the IE6wzd which is under the IEAK6 directory in the Tools folder.  It does prevent the reboot...This uses what MS calls IEXPRESS you can read more about it and find this syntax from the help file that downloads with IEAK6.  

C:\builds\10272004\FLAT\WIN32\EN\ie6setup.exe /R:N /c:"ie6wzd"

As for how to run it you can also create an MSI to just run the setup which I think is what you were doing or using a login/logoff script.  You can use utilites like psexec or another remote command execution program to execute this command on any PC that you needed.  The only thing you would need is a list of PCs.  then setup the appropriate syntax and test it out first before deployment.

Dis
0
 
LVL 10

Expert Comment

by:dis1931
ID: 12422032
As suggested by talphius, another good feature of IEAK is that you will be able to choose an installation that will work despite the logged in user not having admin rights.  IEAK is pretty self explanatory and will tell you what each feature does when you choose it and has a help file to go with it.  An MSI wrapper would work as well and then you could deploy it through WISE or Group Policy
0
 
LVL 1

Author Comment

by:_Canidae_
ID: 12422414
Thanks for all your comments.

I'm going to go off and try all these suggestions.

As a programmer who's been roped into filling in for this damn packaging since our build expert left, I've found the IE6 deployment a bloody nightmare as my first assignment!!!
0
 
LVL 1

Author Comment

by:_Canidae_
ID: 12423191
I can't find a way to include this User Rights Deployment feature that was mentioned.  Will keep looking...
0
 
LVL 10

Expert Comment

by:dis1931
ID: 12423262
There are a couple of sections in the IEAK6 wizard that mention whether users have admin rights or not, this is what it is referring too.

0
 
LVL 1

Author Comment

by:_Canidae_
ID: 12423300
I'm got the checkbox checked for "Enable logon after restart with user-level access", which then mentions that this option should be used for installations with users who don't have admin rights.  That's all I've found, and it hasn't helped, unfortunately.  Setup won't run.
0
 
LVL 1

Author Comment

by:_Canidae_
ID: 12423343
Oh, forgot something...

I've also selected "Display the Subset of IEAK policies for Non-Admin users"
0
 
LVL 1

Author Comment

by:_Canidae_
ID: 12423360
The restricted desktops here just don't seem to like this package, they refuse to run it.
0
 
LVL 5

Expert Comment

by:talphius
ID: 12423403
You read through the deployment guide?

http://support.microsoft.com/kb/810011/EN-US/#4
0
 
LVL 5

Expert Comment

by:talphius
ID: 12423425
0
 
LVL 1

Author Comment

by:_Canidae_
ID: 12531796
Just wanted to let you guys know I've not abandoned this question.

I haven't worked on the IE problem in a good while now, having thankfully gone back to my development role, but am looking at it again today and will award points soon.
0
 
LVL 1

Author Comment

by:_Canidae_
ID: 12642754
Thanks for your help, you two, and sorry for the delay in awarding points.
0

Featured Post

[Webinar] Kill tickets & tabs using PowerShell

Are you tired of cycling through the same browser tabs everyday to close the same repetitive tickets? In this webinar JumpCloud will show how you can leverage RESTful APIs to build your own PowerShell modules to kill tickets & tabs using the PowerShell command Invoke-RestMethod.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article is a collection of issues that people face from time to time and possible solutions to those issues. I hope you enjoy reading it.
WARNING:   If you follow the instructions here, you will wipe out your VTP and VLAN configurations.  Make sure you have backed up your switch!!! I recently had some issues with a few low-end Cisco routers (RV325) and I opened a case with Cisco TA…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
If you're a developer or IT admin, you’re probably tasked with managing multiple websites, servers, applications, and levels of security on a daily basis. While this can be extremely time consuming, it can also be frustrating when systems aren't wor…

592 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question