Apparently there is a bug in the June update that affects enterprise mode. The update method that you are using (with WUSA or DISM) will work fine.
Thanks, -Michael From: [email protected] [mailto:[email protected]] On Behalf Of Miller, Todd Sent: Friday, January 8, 2016 9:37 AM To: [email protected] Subject: [mssms] RE: FYI, if you still have versions of IE older than 11 out there... I've added WUSA.exe .\IE11-Windows6.1-KB3104002-x64.msu /quiet /norestart to my installation script after the IE 11 main executable is finished running. It is working OK-thanks for the suggestion. I could not get it to work baking it in with IEAK. KB3104002 = December 2015 CU for IE 11. Is using DISM to install it as a CAB prefered or equivalent to using WUSA.exe to apply the MSU? It is weird that IEAK 11 is building an installer that includes a cumulative update that is kind of new-June 2015, but not the most recent. And it is frustrating that the version IEAK has settled on is one that is not capable of Enterprise mode. Obligatory sarcastic comment -- I guess all the Microsoft's developer resources are too busy building "selfie" apps for iOS to make the Internet Explorer installer work successfully for their enterprise customers. From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Kevin Johnston Sent: Friday, January 08, 2016 10:42 AM To: '[email protected]' Subject: [mssms] RE: FYI, if you still have versions of IE older than 11 out there... As part of the PSApp deploy the prerequisites are part of the pre-installation The installation part installs IE11 and then the latest patch ##main program write-log -Message "installing main file" -source 'Isinstalled' -Logtype 'Legacy' cmd.exe /c "C:\Windows\System32\dism.exe /online /add-package /packagepath:$dirfiles\IE-Win7.CAB /quiet /norestart" ##Install Update KB3093983 (October 2015) write-log -Message "installing main file" -source 'Isinstalled' -Logtype 'Legacy' cmd.exe /c "C:\Windows\System32\dism.exe /online /add-package /packagepath:$dirfiles\IE11-Windows6.1-KB3093983-x64.cab /quiet /norestart" I have not had any fail so far. I basically modified a script that another user on PSApp deploy used, and I have had success. KEVIN JOHNSTON From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Daniel Ratliff Sent: Friday, January 08, 2016 10:24 AM To: [email protected]<mailto:[email protected]> Subject: [mssms] RE: FYI, if you still have versions of IE older than 11 out there... How? When is your one reboot? After the prereqs? After IE11? After everything? We have seen 0 cases where you can install the prereqs and not reboot before installing IE11. Daniel Ratliff From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Kevin Johnston Sent: Friday, January 8, 2016 7:46 AM To: '[email protected]' Subject: [mssms] RE: FYI, if you still have versions of IE older than 11 out there... I used PSApp deploy and I added the prerequisites plus the latest CU to it. It also does 1 reboot. I haven't had an issue yet with it. Only problem is the detection method. When you configure it to be looking for the version you are deploying, the next month a new one comes out those users that installed IE11 it will then show up again as they are no longer compliant, so I have to modify the setup again to look for the newest version... tedious I know, but at least I only have this month left :) KEVIN JOHNSTON From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Art Flores Sent: Thursday, January 07, 2016 7:29 PM To: [email protected]<mailto:[email protected]> Subject: [mssms] RE: FYI, if you still have versions of IE older than 11 out there... I used the following links and included the latest IE11 cumulative security update KB3104002 that was released 12/8/15. http://joji.me/en-us/blog/create-internet-explorer-11-batch-deployment-package https://technet.microsoft.com/en-us/library/security/MS15-124 From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Daniel Ratliff Sent: Thursday, January 07, 2016 3:49 PM To: [email protected]<mailto:[email protected]> Subject: [mssms] RE: FYI, if you still have versions of IE older than 11 out there... Same here, task sequence with the post-IE11 CU installed. The good news is if you install using the .exe, the post-install CU doesn't require a reboot before being installed. One single reboot for everything. Daniel Ratliff From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of ODONNELL Aaron M Sent: Thursday, January 7, 2016 1:40 PM To: '[email protected]' Subject: [mssms] RE: FYI, if you still have versions of IE older than 11 out there... We are just finishing up our rollout of IE11 and ran into the same issue. The SCCM software updates scan on the workstation wasn't catching computers fast enough when we deployed IE11 overnight so people would log in the next morning and IE would still be unpatched and then have various enterprise mode issues. Our solution was to use a task sequence to push out the IE update installer with an added command line step for using DISM to apply the .cab file of the latest IE cumulative update and kick off another reboot. Kind of the brute force method but it eliminated a lot of problems for us. Thanks, Aaron O'Donnell From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Miller, Todd Sent: Thursday, January 07, 2016 1:25 PM To: [email protected]<mailto:[email protected]> Subject: [mssms] RE: FYI, if you still have versions of IE older than 11 out there... Hey, on this topic... I am in the final stages of preparing to deploy IE 11. During the testing phase I discovered that it is deployiong IE 11 and the client end up with the June 9 2015 Cumulative update installed. This is version 11.0.20. That version is supposed to be new enough for the Enterprise Mode "stuff' but the Enterprise mode stuff is not working and not showing in the Tools menu. Only after a more recent CU is installed - like the December 2015 update - does the Enterprise Mode start working. (I've looked in the registry on the machines and the policy entries are there -so it is not because the GPO is not making it to the client) I can't figure out why 1) The June 2015 version is not "new" enough for the Enterprise mode stuff that came in 2014 and 2) if there is a way to pack in a newer Cumulative Update. I don't honestly know how the June 9 2015 CU got included in the package either... Looking on the internet - there are gobs of blogs about adding pre-requisites, but nothing on post requisites. I've tried to use a similar method to include an MSU in the IEAK, but set it to "after system restart" but that is a no go. Internet research tells me that function in IEAK doesn't work anyway. So any tips on deploying IE 11 with a version that can use Enterprise mode out of the gate? Otherwise my clients are without Enterprise mode for 1-6 days depending where they are on the software update re-scan cycle. I'm about to throw in the towel and just have some web sites not work for a few days while the clients catch up with a new IE 11 Update version that supports Enterprise mode. From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Art Flores Sent: Thursday, January 07, 2016 1:13 PM To: [email protected]<mailto:[email protected]> Subject: [mssms] FYI, if you still have versions of IE older than 11 out there... Time to push out a GPO if you want to avoid some new nag notifications. https://support.microsoft.com/en-us/kb/3123303 http://blogs.msdn.com/b/askie/archive/2015/12/17/how-to-implement-the-end-of-life-feature-control-key-outlined-in-kb3123303-using-group-policy.aspx ________________________________ Notice: This UI Health Care e-mail (including attachments) is covered by the Electronic Communications Privacy Act, 18 U.S.C. 2510-2521, is confidential and may be legally privileged. If you are not the intended recipient, you are hereby notified that any retention, dissemination, distribution, or copying of this communication is strictly prohibited. Please reply to the sender that you have received the message in error, then delete it. Thank you. ________________________________ The information transmitted is intended only for the person or entity to which it is addressed and may contain CONFIDENTIAL material. If you receive this material/information in error, please contact the sender and delete or destroy the material/information. The information transmitted is intended only for the person or entity to which it is addressed and may contain CONFIDENTIAL material. If you receive this material/information in error, please contact the sender and delete or destroy the material/information. ________________________________ Notice: This UI Health Care e-mail (including attachments) is covered by the Electronic Communications Privacy Act, 18 U.S.C. 2510-2521, is confidential and may be legally privileged. If you are not the intended recipient, you are hereby notified that any retention, dissemination, distribution, or copying of this communication is strictly prohibited. Please reply to the sender that you have received the message in error, then delete it. Thank you. ________________________________
