IE8 Rolled out but not approved by WSUS

mbsadmin2
mbsadmin2 used Ask the Experts™
on
I have two WSUS servers running independently and two sites.  At this stage I have not released IE8 to our users.  It has been sitting in the queue unapproved.  On Monday I began receiving complaints that IE8 has been deployed to some users.  I checked the following:

- All of these computers were managed by one WSUS server
- There is no manual access to the windows update site.  This has been disabled via group policy.
- The IE8 update is still sitting in both WSUS servers with a status of unapproved.
- It looks as though other unapproved updates did not roll out

The only change I have made around this time was to upgrade our WSUS servers from Ver 3 SP1 to Ver 3 SP2.  Not sure if this is coincidence or not. I cant see this to be an issue as the updates remained unapproved.

Any ideas?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®

Author

Commented:
Thanks for that.  What I am concered about is if these machines are managed by WSUS only, why did they receive the update?  Surely MS cannot push them out overriding the WSUS server policies?
DonNetwork Administrator

Commented:
If you have "Update rollups" set to auto approve, WSUS will automatically install...

From the links:


Preventing Automatic Installation of Internet Explorer 8 with WSUS
Microsoft will release the Windows Internet Explorer 8 Installation and Availability update to Windows Server Update Services (WSUS) marked as an Update Rollup package. If you have configured WSUS to "auto-approve" Update Rollup packages (this is not the default configuration), Windows Internet Explorer 8 will be automatically approved for installation and consequently, you may want to take the actions below to manage how and when this update is installed. The Internet Explorer Blocker Toolkit blocks only installation that occurs by using Windows Update and Automatic Update. The toolkit does not block distribution that occurs by using WSUS. You will need to take action if:

Acronis in Gartner 2019 MQ for datacenter backup

It is an honor to be featured in Gartner 2019 Magic Quadrant for Datacenter Backup and Recovery Solutions. Gartner’s MQ sets a high standard and earning a place on their grid is a great affirmation that Acronis is delivering on our mission to protect all data, apps, and systems.

Author

Commented:
Thanks for your reply.  I have the default auto-approval turned off.  There are no auto-approvals happening on either server.
DonNetwork Administrator

Commented:
Either way, if you want to ensure that its blocked from further installs you should use the toolkit.

Author

Commented:
Thanks, no doubt i will.  I need some clues as to why this as happened though as I have to report on it.
DonNetwork Administrator

Commented:
Were these complaints coming from users that shared computers?

Maybe other users downloaded and installed it??

Author

Commented:
No this complaint came from multiple users.  Including my GM!   They do not have access to the Windows update site.  this is blocked by group policy.  I have tested that this is still the case.
Network Administrator
Commented:
just so you are aware

http://www.filehippo.com/download_internet_explorer_xp/

among many other places to get it.

We have allowed IE8 to install, but have also used the following from here

http://support.microsoft.com/kb/956197

Method 3: Set Compatibility View options for multiple computers in an enterprise environment by using Group Policy settings
DonNetwork Administrator

Commented:
You should be able to check their eventvwrs to see how they were installed.

Commented:
I see the same behavior, since I had to remove the Declined attribute to roll it out for some of my WSUS groups it seems to be offered also for the unapproved groups from what I can see.

Best greetings from Germany
Olaf

Author

Commented:
not entirely solved but comments were helpful

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial