RE: Internet Explorer 7 is being delivered through Automatic Updates even if you run your own internal WSUS server

Hi Kevin,

The IST WSUS sponsored server did not automatically approve the updated
version of IE7, which I believe was changed to no longer require Windows
Genuine Advantage (WGA) for IE7. OU administrators using our WSUS are
still able to block the installation of IE7 via the GPO "CAMPUS - Block
IE7 Install (USE IST WSUS)". Alternatively, OU administrators can allow
the installation of IE7 via the GPO "CAMPUS - WSUS".

Thanks,

John E. Weber
Microsoft Certified Systems Engineer
Infrastructure Services - OneIST
Campus Active Directory Architect, CalNet Active Directory
University of California, Berkeley
johnweber_at_berkeley.edu
2195 Hearst Avenue, #300B-07
(510) 847-9756
http://windows.berkeley.edu <http://calnetad.berkeley.edu/>

From: owner-micronet-list_at_lists.berkeley.edu
[mailto:owner-micronet-list_at_lists.berkeley.edu] On Behalf Of Kevin D.
Burney
Sent: Friday, October 05, 2007 10:13 AM
To: micronet-list_at_lists.berkeley.edu
Subject: [Micronet] Internet Explorer 7 is being delivered through
Automatic Updates even if you run your own internal WSUS server

My environment received a smattering of IE7 installs from some
mysterious place last night. We run all of our machines against our own
internal WSUS server which has the IE7 install disabled and it has been
so for over a year now. In my investigation of the mysterious installs
of IE7 last night I found that Microsoft updated their article about the
"Toolkit to Disable Automatic Delivery of Internet Explorer 7"
yesterday. I did not have the blocker in place because in the
documentation for the blocker it says that it is not needed if you run
your own internal WSUS server (Organizations do not need to deploy the
Blocker Toolkit in environments managed with an update management
solution such as Windows Server Update Services or Systems Management
Server 2003. Organizations can use those products to fully manage
deployment of updates released through Windows Update and Microsoft
Update, including Internet Explorer 7, within their environment.) I
have now implemented the GPO which blocks the auto install of IE7 so I
hope that I do not receive any more installs going forward.

Has anyone else experienced this?

Internet Explorer 7 is being delivered through Automatic Updates

Published: July 26, 2006 | Updated: October 4, 2007

http://www.microsoft.com/downloads/details.aspx?FamilyId=4516A6F7-5D44-4
82B-9DBD-869B4A90159C&displaylang=en

http://technet.microsoft.com/en-us/updatemanagement/bb259685.aspx

http://technet.microsoft.com/en-us/updatemanagement/bb226738.aspx

-Kevin

Kevin D. Burney, PMP

IT Director

COIS Mailcode-1516

2105 Bancroft Way - 2nd floor

Berkeley, CA 94720-1516

(510) 827-8476

kburney_at_berkeley.edu

CHOPS:

http://helpdesk.chance.berkeley.edu/helpdesk

website:

http://cois.berkeley.edu <http://cois.berkeley.edu/>

------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to
or unsubscribe from its mailing list and how to find out
about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu/

Messages you send to this mailing list are public and world-viewable,
and the list's archives can be browsed and searched on the Internet.
This means these messages can be viewed by (among others) your bosses,
prospective employers, and people who have known you in the past.