Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions

Uninstall IE9 after approved WSUS update

Posted on 2013-01-03
Last Modified: 2013-01-09

We recently approved an update on WSUS to install IE9 to all Windows 7 machines. After it was rolled out, we found a problem with IE9 on Windows 7 that affects our agency management system.

We have uninstalled IE9 through Control Panel > Programs and Features > View Installed update, Scroll to Windows Updates and then right click on Windows Internet Explorer 9 and Uninstall. This sets it back to IE8 which works without issue. The problem is when the computer is rebooted, IE9 reinstalls itself.

So, how do I go about removing the approval of the IE9 update on WSUS so that we can roll back to IE8. Also, can the process automate to uninstall all IE9 updates on Windows 7 machines? If so, how would that need to be setup?

Thanks for your help.
Question by:DSG-IT
  • 2
LVL 29

Accepted Solution

Randy Downs earned 400 total points
ID: 38742730
Try this

Options for Blocking Automatic Delivery
Microsoft recommends that organizations who are using Automatic Updates in their environments and wish to prevent users from automatically receiving Internet Explorer 9 take one or more of the following steps:
Download and deploy the Internet Explorer 9 Blocker Toolkit. The non-expiring Blocker Toolkit is available from the Microsoft Download Center. It includes both a Group Policy template and a script that set a registry key to prevent Automatic Updates and the Windows Update and Microsoft Update sites from offering Internet Explorer 9 as a high-priority update. (Note: The Blocker Toolkit will not prevent users who are local administrators from manually installing Internet Explorer 9 from, for example, external media or the Microsoft Download Center.) Using the Internet Explorer 9 Blocker Toolkit also prevents your users from receiving automatic upgrades from Internet Explorer 7 or Internet Explorer 8 to Internet Explorer 9. For more information, see the Internet Explorer 9 Blocker Toolkit Frequently Asked Questions.
Deploy an update management solution that provides full control over the updates deployed to computers in your network. Microsoft offers the free Windows Server Update Services and the more advanced Microsoft System Center Configuration Manager and Systems Management Server 2003 update management products. IT Administrators using an update management solution should use the standard features of their product (rather than the Blocker Toolkit) to control Internet Explorer 9 distribution.
If your organization uses WSUS to manage updates, and Update Rollups are configured for automatic installation, Internet Explorer will automatically install throughout your organization. This scenario is discussed in detail in the Knowledge Base article here.
Instruct users to decline Internet Explorer 9 when Automatic Updates notifies them that the update is available to install. If the above options are not feasible for your organization, you can also instruct your users to choose “Don’t Install” when prompted by the Internet Explorer 9 welcome screen. Users will not need to take special action to receive notification, and all users will have the ability to decline installation.
Additional information on Internet Explorer 9, including a Readiness Toolkit, technical overview, in-depth feature summary, and Internet Explorer 9 download is available on the Internet Explorer 9 product page and on the Springboard Series for Internet Explorer 9 on TechNet.

Author Comment

ID: 38742747
Thank you.
1) This update had already been approved and rolled out to the W7 machines. Can this single update (Internet Explorer 9) be modified on WSUS to change the status to "not approved"?

2) Will installing the Internet Explorer 9 Blocker Toolkit prevent IE9 from being installed on machines even though the update was aproved on WSUS?

3) If the issue with IE9 is resolved at some point in the future, can we remove the Blocker Toolkit and that will permit IE9 from installing?

Thank you
LVL 29

Assisted Solution

by:Randy Downs
Randy Downs earned 400 total points
ID: 38742757
The article below is a bit dated but probably still applies for revoking approval. The blocker should work after you revoke the update.  You may not need the blocker if you can switch to not approved.

If you can approve the update after revoking then you should be able to roll it out. The old article below suggests otherwise but hopefully you can toggle approve/not approved at will.


You may like to right click the problematic update and choose Approve. Then
choose to "Not Approved". However, if the client had downloaded and
installed the update, this action will not uninstall update from client.
The only way is to uninstall the update from Add/Remove Programs.

About the option "Decline", when you decline an update, it will no longer
be displayed by default on the Updates page, and you will not be able to
approve it. This action also will not remove the update from client

Featured Post

Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I recently purchased an HP EliteBook 2540p notebook/laptop. It has two video ports on it – VGA and DisplayPort. HP offers an optional docking station for the 2540p that also has both a VGA port and a DisplayPort. There are numerous online reports do…
While working, an annoying popup showing below will come and we cannot cancel or close it form the screen. The error message will come again and again.
This Micro Tutorial will give you basic overview of the control panel section on Windows 7. It will depth in Network and Internet, Hardware and Sound, etc. This will be demonstrated using Windows 7 operating system.
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question