We're tangling with this same thing right now, but thing we have the single reboot thing figured out.
However.... Is anyone seeing the behavior that systems are showing that KB3109094 is applicable once again after upgrading from prior versions of IE to IE11? On Fri, Jan 8, 2016 at 11:41 AM, Art Flores <[email protected]> wrote: > During my testing I saw some errors in the event logs with the 9 > prerequisites, I added the /IgnoreCheck, and that got rid of my errors, I > am installing everything in one pass and then doing a reboot. > > > > dism /online /add-package > /packagepath:Cabfiles/Windows6.1-KB2834140-v2-x64.cab /IgnoreCheck /quiet > /norestart > > > > *From:* [email protected] [mailto: > [email protected]] *On Behalf Of *Kevin Johnston > *Sent:* Friday, January 08, 2016 10:42 AM > *To:* '[email protected]' <[email protected]> > *Subject:* [mssms] RE: FYI, if you still have versions of IE older than > 11 out there... > > > > > > As part of the PSApp deploy the prerequisites are part of the > pre-installation > > The installation part installs IE11 and then the latest patch > > > > ##main program > > write-log -Message "installing main file" -source 'Isinstalled' -Logtype > 'Legacy' > > cmd.exe /c "C:\Windows\System32\dism.exe /online /add-package > /packagepath:$dirfiles\IE-Win7.CAB /quiet /norestart" > > > > > > ##Install Update KB3093983 (October 2015) > > write-log -Message "installing main file" -source 'Isinstalled' -Logtype > 'Legacy' > > cmd.exe /c "C:\Windows\System32\dism.exe /online /add-package > /packagepath:$dirfiles\IE11-Windows6.1-KB3093983-x64.cab /quiet > /norestart" > > > > I have not had any fail so far. I basically modified a script that another > user on PSApp deploy used, and I have had success. > > > > KEVIN JOHNSTON > > > > *From:* [email protected] [ > mailto:[email protected] <[email protected]>] *On > Behalf Of *Daniel Ratliff > *Sent:* Friday, January 08, 2016 10:24 AM > *To:* [email protected] > *Subject:* [mssms] RE: FYI, if you still have versions of IE older than > 11 out there... > > > > How? When is your one reboot? After the prereqs? After IE11? After > everything? > > > > We have seen 0 cases where you can install the prereqs and not reboot > before installing IE11. > > > > *Daniel Ratliff* > > > > *From:* [email protected] [ > mailto:[email protected] <[email protected]>] *On > Behalf Of *Kevin Johnston > *Sent:* Friday, January 8, 2016 7:46 AM > *To:* '[email protected]' > *Subject:* [mssms] RE: FYI, if you still have versions of IE older than > 11 out there... > > > > I used PSApp deploy and I added the prerequisites plus the latest CU to > it. It also does 1 reboot. I haven’t had an issue yet with it. > > Only problem is the detection method. When you configure it to be looking > for the version you are deploying, the next month a new one comes out those > users that installed IE11 it will then show up again as they are no longer > compliant, so I have to modify the setup again to look for the newest > version… tedious I know, but at least I only have this month left J > > > > KEVIN JOHNSTON > > > > *From:* [email protected] [ > mailto:[email protected] <[email protected]>] *On > Behalf Of *Art Flores > *Sent:* Thursday, January 07, 2016 7:29 PM > *To:* [email protected] > *Subject:* [mssms] RE: FYI, if you still have versions of IE older than > 11 out there... > > > > I used the following links and included the latest IE11 cumulative > security update KB3104002 that was released 12/8/15. > > > > > http://joji.me/en-us/blog/create-internet-explorer-11-batch-deployment-package > > > > https://technet.microsoft.com/en-us/library/security/MS15-124 > > > > *From:* [email protected] [ > mailto:[email protected] <[email protected]>] *On > Behalf Of *Daniel Ratliff > *Sent:* Thursday, January 07, 2016 3:49 PM > *To:* [email protected] > *Subject:* [mssms] RE: FYI, if you still have versions of IE older than > 11 out there... > > > > Same here, task sequence with the post-IE11 CU installed. The good news is > if you install using the .exe, the post-install CU doesn’t require a reboot > before being installed. One single reboot for everything. > > > > *Daniel Ratliff* > > > > *From:* [email protected] [ > mailto:[email protected] <[email protected]>] *On > Behalf Of *ODONNELL Aaron M > *Sent:* Thursday, January 7, 2016 1:40 PM > *To:* '[email protected]' > *Subject:* [mssms] RE: FYI, if you still have versions of IE older than > 11 out there... > > > > We are just finishing up our rollout of IE11 and ran into the same issue. > The SCCM software updates scan on the workstation wasn’t catching computers > fast enough when we deployed IE11 overnight so people would log in the next > morning and IE would still be unpatched and then have various enterprise > mode issues. Our solution was to use a task sequence to push out the IE > update installer with an added command line step for using DISM to apply > the .cab file of the latest IE cumulative update and kick off another > reboot. Kind of the brute force method but it eliminated a lot of problems > for us. > > > > Thanks, > > > > Aaron O’Donnell > > > > *From:* [email protected] [ > mailto:[email protected] <[email protected]>] *On > Behalf Of *Miller, Todd > *Sent:* Thursday, January 07, 2016 1:25 PM > *To:* [email protected] > *Subject:* [mssms] RE: FYI, if you still have versions of IE older than > 11 out there... > > > > Hey, on this topic… > > > > I am in the final stages of preparing to deploy IE 11. During the testing > phase I discovered that it is deployiong IE 11 and the client end up with > the June 9 2015 Cumulative update installed. This is version 11.0.20. > That version is supposed to be new enough for the Enterprise Mode “stuff’ > but the Enterprise mode stuff is not working and not showing in the Tools > menu. Only after a more recent CU is installed – like the December 2015 > update – does the Enterprise Mode start working. (I’ve looked in the > registry on the machines and the policy entries are there –so it is not > because the GPO is not making it to the client) > > > > I can’t figure out why 1) The June 2015 version is not “new” enough for > the Enterprise mode stuff that came in 2014 and 2) if there is a way to > pack in a newer Cumulative Update. I don’t honestly know how the June 9 > 2015 CU got included in the package either… > > > > Looking on the internet – there are gobs of blogs about adding > pre-requisites, but nothing on post requisites. I’ve tried to use a > similar method to include an MSU in the IEAK, but set it to “after system > restart” but that is a no go. Internet research tells me that function in > IEAK doesn’t work anyway. > > > > So any tips on deploying IE 11 with a version that can use Enterprise mode > out of the gate? > > > > Otherwise my clients are without Enterprise mode for 1-6 days depending > where they are on the software update re-scan cycle. I’m about to throw > in the towel and just have some web sites not work for a few days while the > clients catch up with a new IE 11 Update version that supports Enterprise > mode. > > > > *From:* [email protected] [ > mailto:[email protected] <[email protected]>] *On > Behalf Of *Art Flores > *Sent:* Thursday, January 07, 2016 1:13 PM > *To:* [email protected] > *Subject:* [mssms] FYI, if you still have versions of IE older than 11 > out there... > > > > Time to push out a GPO if you want to avoid some new nag notifications. > > > > https://support.microsoft.com/en-us/kb/3123303 > > > > > http://blogs.msdn.com/b/askie/archive/2015/12/17/how-to-implement-the-end-of-life-feature-control-key-outlined-in-kb3123303-using-group-policy.aspx > > > > > > > > > ------------------------------ > > Notice: This UI Health Care e-mail (including attachments) is covered by > the Electronic Communications Privacy Act, 18 U.S.C. 2510-2521, is > confidential and may be legally privileged. If you are not the intended > recipient, you are hereby notified that any retention, dissemination, > distribution, or copying of this communication is strictly prohibited. > Please reply to the sender that you have received the message in error, > then delete it. Thank you. > ------------------------------ > > > > > > > The information transmitted is intended only for the person or entity to > which it is addressed > and may contain CONFIDENTIAL material. If you receive this > material/information in error, > please contact the sender and delete or destroy the material/information. > > > > > > > > > The information transmitted is intended only for the person or entity to > which it is addressed > and may contain CONFIDENTIAL material. If you receive this > material/information in error, > please contact the sender and delete or destroy the material/information. > > > > > >
