Upgrade from IE8 to IE via GPO

I have 300 PCs that are currently using Internet Explorer 8, I know this is out of date, and we want to push out the upgrade, not update for IE 9 because they're using legacy apps so can't go higher than IE 9 at the moment. However, they need IE 9 as a minimum to access our CRM platform.

WSUS tries to push out updates but doesn't upgrade the IE version. I need to know if there is a script that can open the following link below and also initiate the 'Download' button on this page via GPO.

http://www.microsoft.com/en-gb/download/internet-explorer-9-details.aspx

Thanks
LVL 2
CTCRMInfrastructure EngineerAsked:
Who is Participating?
 
Brad GrouxConnect With a Mentor Senior Manager (Wintel Engineering)Commented:
GPOs aren't meant to be used as software distribution meachanisms, WSUS would be the perfect solution.

Also, I'd recommend upgrading to at least IE10 - as GPO support for IE9 was VERY limited and therefore it is not recommended any longer.

How to install IE11 via WSUS - http://technet.microsoft.com/en-us/library/dn321452.aspx
To import from Windows Update to WSUS
1. Open your WSUS admin site. For example, http://WSUSServerName/WSUSAdmin/.
    Where WSUSServerName is the name of your WSUS server.
2. Choose the top server node or the Updates node, and then click Import Updates.
3. To get the updates, install the Microsoft Update Catalog ActiveX control.
4. Search for Internet Explorer 11 and add its contents to your basket.
5. After you're done browsing, go to your basket and click Import.
    You can also download the updates without importing them by unchecking the Import directly into Windows Server Update Services box.

To approve Internet Explorer in WSUS for installation
1. Open your WSUS admin site and check the Review synchronization settings box from the To Do list.
2. Click Synchronize now to sync your WSUS server with Windows Update, and then click Updates from the navigation bar.
3. Enter Internet Explorer 11 into the Search Contains box, and then click Apply.
4. Choose the right version of Internet Explorer 11 for your operating system, and click Approve for installation.
5. Click each computer group you want to set up for the WSUS server, picking the right approval level, and then click OK.

Open in new window

0
 
CTCRMInfrastructure EngineerAuthor Commented:
Hi

Due to legacy web apps we cannot go any higher than IE 9.0 on these 300 PCs otherwise I would have bought them all up-to-date to IE11. It looks like it will have to be a manual process locally on each machine
0
 
Brad GrouxSenior Manager (Wintel Engineering)Commented:
You should still be able to publish IE9 via WSUS following the same steps I listed above for IE11. You can also create an unatted.xml and roll it out via software distribution as discussed here - http://technet.microsoft.com/en-us/library/gg699427.aspx
0
 
CTCRMInfrastructure EngineerAuthor Commented:
OK, I have followed your instructions above and pulled down all related updates to Internet Explorer 9 and have only approved these updates for deployment which are scheduled for today at 4pm. We have a daily automated PC reboot GPO which kicks off at 5ish so I will check those 300 target PCs in the morning to see if any of them have been upgraded.
0
 
CTCRMInfrastructure EngineerAuthor Commented:
This worked, Thanks
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.