Hmmmmmm, I ran WU manually on a few machines that had the GPO applied and the IE8 update did appear in the list of available updates, but when it would normally start the download, it failed.
Don Guyer Systems Engineer - Information Services Prudential, Fox & Roach/Trident Group 431 W. Lancaster Avenue Devon, PA 19333 Direct: (610) 993-3299 Fax: (610) 650-5306 [email protected] <mailto:[email protected]> From: Jon Harris [mailto:[email protected]] Sent: Friday, September 25, 2009 10:49 AM To: NT System Admin Issues Subject: Re: IE8 Issues That would depend on if WSUS was in use, if it had been approved for deployment, and which OS the clients were. My experence is that if the clients are Vista or 7 then if WSUS says to not deploy and they are in a domain it will not deploy. XP clients will ignore WSUS and deploy if you are an admin and run manually Windows Update. . Jon On Fri, Sep 25, 2009 at 10:34 AM, Don Guyer <[email protected]> wrote: We've got a GPO in place blocking the installation of IE8 through Windows Updates. Obviously, this does not prevent advanced users from downloading it directly. Computer Configuration (Enabled)hide Policieshide Administrative Templateshide Policy definitions (ADMX files) retrieved from the local machine. Windows Components/Windows Update/Automatic Updates Blockers v2hide Policy Setting Comment Do not allow delivery of Internet Explorer 8 through Automatic Updates Enabled User Configuration (Enabled)hide No settings defined. Don Guyer Systems Engineer - Information Services Prudential, Fox & Roach/Trident Group 431 W. Lancaster Avenue Devon, PA 19333 Direct: (610) 993-3299 Fax: (610) 650-5306 [email protected] From: Jim Slattery [mailto:[email protected]] Sent: Friday, September 25, 2009 10:22 AM To: NT System Admin Issues Subject: IE8 Issues I have a group of users that are locked down pretty tight (call center), but IE8 got installed on a couple of the machines by supervisors or users with elevated permissions. Now when the regular call center users try to open IE, it won't start (maybe because they don't have the rights to run that initial configuration bit where you set up the browser for the first use). I've tried Computer Configuration/Administrative Templates/Internet Explorer/Prevent Performance of First Run Customize settings in GPO, but that didn't fix it like I'd hoped. Anyone else have this issue with IE8? I'm digging through GPO and Googlin' now, but if you've run into this before, I'd appreciate the help. Thanks! Jim Slattery Systems Administrator MEDEX Global Group 8501 LaSalle Road, Suite 200 Baltimore, MD 21286 USA Direct: 1-410-308-7931 Main: 1-410-453-6300 Toll free: 1-800-537-2029 Fax: 1-410-308-7905 www.medexassist.com <http://www.medexassist.com/> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
