Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Stopping Window 7 Client PC from installing  explorer 11

Posted on 2014-04-17
7
Medium Priority
?
944 Views
Last Modified: 2014-04-29
Hi

I have migrated from window XP to windows 7 and GPO templates have not been still updated. Our AD servers are Windows 2012.

Explorer 9 works fine on the PCs and  after the Microsoft updates it installs explorer 11. So explorer 11 doesn't pick up the proxy settings on these windows 7 PCs.

We use WSUS and Is it possible to stop the WSUS pushing the explorer 11 to the windows 7 client PCs.

Or is there a better way of doing this.  

Thanks
0
Comment
Question by:lianne143
7 Comments
 
LVL 13

Accepted Solution

by:
Santosh Gupta earned 800 total points
ID: 40006323
Hi,

see the section Preventing Automatic Installation of Internet Explorer 11 with WSUS

http://technet.microsoft.com/en-in/ie/dn449235
0
 
LVL 99

Assisted Solution

by:John Hurst
John Hurst earned 800 total points
ID: 40006335
You can also hide the update and it should not install.
0
 

Author Comment

by:lianne143
ID: 40006724
Please can you post me as how to hide the update
0
Prepare for your VMware VCP6-DCV exam.

Josh Coen and Jason Langer have prepared the latest edition of VCP study guide. Both authors have been working in the IT field for more than a decade, and both hold VMware certifications. This 163-page guide covers all 10 of the exam blueprint sections.

 
LVL 13

Assisted Solution

by:Santosh Gupta
Santosh Gupta earned 800 total points
ID: 40006790
i am not sure if there is any such option in WSUS. it is only on local computers.


http://www.sevenforums.com/tutorials/24376-windows-update-hide-restore-hidden-updates.html
0
 
LVL 99

Assisted Solution

by:John Hurst
John Hurst earned 800 total points
ID: 40006884
When you go to Windows Update on the local machine (and before you allow it to run), you should be able to select it and hide the update. That stops it from installing.
0
 
LVL 19

Assisted Solution

by:Mike T
Mike T earned 400 total points
ID: 40009217
Hi,

Santosh has given the exact answer you asked for WSUS already. Other methods are not as good. The viable options are:

1) use the TechNet directions Preventing Automatic Installation of Internet Explorer 11 with WSUS
2) Download and use the Internet Explorer 11 Blocker Toolkit. Includes
3) manually hiding IE11 on each machine
4) use App-locker to block the EXE or MSI name

Remember if you can hide something, users can un-hide it. As (3) requires a visit to each machine it is really a non-starter especially if you have more than say 5 machines. Also there is no protection to them just installing it elsewhere if they are admins on their own machine. (4) won't stop someone renaming the file and then installing it. You can still block with AppLocker but it's too much work compared to 1 or 2.

I would be tempted to do 1 & 2 together. Belt and braces.

Mike
0
 
LVL 99

Expert Comment

by:John Hurst
ID: 40029328
@lianne143 - Thank you and I was happy to help.
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

After seeing many questions for JRNL_WRAP_ERROR for replication failure, I thought it would be useful to write this article.
Wouldn't it be nice if objects in Active Directory automatically moved into the correct Organizational Units? This is what AutoAD aims to do and as a plus, it automatically creates Sites, Subnets, and Organizational Units.
This Micro Tutorial will give you a introduction in two parts how to utilize Windows Live Movie Maker to its maximum capability. This will be demonstrated using Windows Live Movie Maker on Windows 7 operating system.
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Suggested Courses

971 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question