• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1735
  • Last Modified:

Uninstall IE9 after approved WSUS update


We recently approved an update on WSUS to install IE9 to all Windows 7 machines. After it was rolled out, we found a problem with IE9 on Windows 7 that affects our agency management system.

We have uninstalled IE9 through Control Panel > Programs and Features > View Installed update, Scroll to Windows Updates and then right click on Windows Internet Explorer 9 and Uninstall. This sets it back to IE8 which works without issue. The problem is when the computer is rebooted, IE9 reinstalls itself.

So, how do I go about removing the approval of the IE9 update on WSUS so that we can roll back to IE8. Also, can the process automate to uninstall all IE9 updates on Windows 7 machines? If so, how would that need to be setup?

Thanks for your help.
  • 2
2 Solutions
Randy DownsOWNERCommented:
Try this

Options for Blocking Automatic Delivery
Microsoft recommends that organizations who are using Automatic Updates in their environments and wish to prevent users from automatically receiving Internet Explorer 9 take one or more of the following steps:
Download and deploy the Internet Explorer 9 Blocker Toolkit. The non-expiring Blocker Toolkit is available from the Microsoft Download Center. It includes both a Group Policy template and a script that set a registry key to prevent Automatic Updates and the Windows Update and Microsoft Update sites from offering Internet Explorer 9 as a high-priority update. (Note: The Blocker Toolkit will not prevent users who are local administrators from manually installing Internet Explorer 9 from, for example, external media or the Microsoft Download Center.) Using the Internet Explorer 9 Blocker Toolkit also prevents your users from receiving automatic upgrades from Internet Explorer 7 or Internet Explorer 8 to Internet Explorer 9. For more information, see the Internet Explorer 9 Blocker Toolkit Frequently Asked Questions.
Deploy an update management solution that provides full control over the updates deployed to computers in your network. Microsoft offers the free Windows Server Update Services and the more advanced Microsoft System Center Configuration Manager and Systems Management Server 2003 update management products. IT Administrators using an update management solution should use the standard features of their product (rather than the Blocker Toolkit) to control Internet Explorer 9 distribution.
If your organization uses WSUS to manage updates, and Update Rollups are configured for automatic installation, Internet Explorer will automatically install throughout your organization. This scenario is discussed in detail in the Knowledge Base article here.
Instruct users to decline Internet Explorer 9 when Automatic Updates notifies them that the update is available to install. If the above options are not feasible for your organization, you can also instruct your users to choose “Don’t Install” when prompted by the Internet Explorer 9 welcome screen. Users will not need to take special action to receive notification, and all users will have the ability to decline installation.
Additional information on Internet Explorer 9, including a Readiness Toolkit, technical overview, in-depth feature summary, and Internet Explorer 9 download is available on the Internet Explorer 9 product page and on the Springboard Series for Internet Explorer 9 on TechNet.
DSG-ITAuthor Commented:
Thank you.
1) This update had already been approved and rolled out to the W7 machines. Can this single update (Internet Explorer 9) be modified on WSUS to change the status to "not approved"?

2) Will installing the Internet Explorer 9 Blocker Toolkit prevent IE9 from being installed on machines even though the update was aproved on WSUS?

3) If the issue with IE9 is resolved at some point in the future, can we remove the Blocker Toolkit and that will permit IE9 from installing?

Thank you
Randy DownsOWNERCommented:
The article below is a bit dated but probably still applies for revoking approval. The blocker should work after you revoke the update.  You may not need the blocker if you can switch to not approved.

If you can approve the update after revoking then you should be able to roll it out. The old article below suggests otherwise but hopefully you can toggle approve/not approved at will.


You may like to right click the problematic update and choose Approve. Then
choose to "Not Approved". However, if the client had downloaded and
installed the update, this action will not uninstall update from client.
The only way is to uninstall the update from Add/Remove Programs.

About the option "Decline", when you decline an update, it will no longer
be displayed by default on the Updates page, and you will not be able to
approve it. This action also will not remove the update from client

Featured Post

Hire Technology Freelancers with Gigs

Work with freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely, and get projects done right.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now