How-To Geek Forums / Geek Stuff
(Solved) - How to prevent automatic download of IE 9 in auto update ?
(24 posts)- View Accepted Answer
- Remove Solved Status
amkeew,
IE9 starts delivery Monday, March 14.
Better HURRY.
Toolkit to Disable Automatic Delivery of Internet Explorer 9
http://www.microsoft.com/downl.....776bf2bea4
@MOD May be needs to be made STICKY for a while ??
Rick P.
From the MS Technet site:
"Internet Explorer 9 will not install automatically – the Automatic Updates delivery process will include a welcome screen that offers users choices of Install, Don’t Install, and Ask Me Later prior to installation.
The notification and installation process will not start unless and until a user who is a local administrator logs on to the machine. Users who are not local administrators will not be prompted to install the update and will thus continue using Internet Explorer 7 or 8."
Validate the Internet Explorer 9 Blocker
How the Blocker Toolkit WorksQ. What testing should customers do to validate the Internet Explorer 9 Blocker Toolkit Microsoft is making available before using it?
A. Because the Blocker Toolkit being provided by Microsoft relies on a new registry key that is used only for the purpose of disabling and re-enabling delivery of Internet Explorer 9, there should be no additional impact or side effect on the system. No additional testing should be necessary to validate the Toolkit.
Q. What registry key is being used to disable delivery of Internet Explorer 9?
A. HKLM\SOFTWARE\Microsoft\Internet Explorer\Setup\9.0
Q. What is the key value name and what are the value options?
A. The key value name is "DoNotAllowIE90".
IMPORTANT FAQ
http://technet.microsoft.com/e.....ID=library
ADDED to Above for clarification.
If the value is '1', automatic delivery of Internet Explorer 9 through Automatic Updates and the Windows Update/Microsoft Update site "Express" install option is disabled. If the value is not '1' or if the key doesn't exist, the system will be offered Internet Explorer 9 by Automatic Updates or if a user performs a manual update scan for important updates via the Windows Update/Microsoft Update sites.
Good Lord...
You folks actually have automatic updates configured to full auto?
Damn. Just damn.
For years I've had mine set to Notify only. And for years I've sat back and watched OTHER people get stung by the buggy patches. Once the buggy stuff has been identified and rectified I then (and only then) update manually. So this "IE9 automatic update" mess just doesn't apply to me.
COPY Script Below in between lines to a Notepad Text File
SAVE file as IE9_BLOCKER.TXT
RENAME file as IE9_BLOCKER.CMD
COPY file to Windows32 Folder
Open CMD Prompt as Administrator
Type In IE9_BLOCKER /B and tap the Enter key
===========================================DO NOT COPY THIS LINE====================
@echo off
Echo MICROSOFT TOOL KIT TO DISABLE DELIVERY OF
Echo MICROSOFT INTERNET EXPLORER 9
Echo.
Echo Copyright (C) Microsoft Corporation. All rights reserved.
Echo.
set ProductName=Internet Explorer 9
set REGBlockKey=HKLM\SOFTWARE\Microsoft\Internet Explorer\Setup\9.0
set REGBlockValue=DoNotAllowIE90
set RemoteMachine=%1
if ""=="%1" goto Usage
if "/?"=="%1" goto Usage
if /I "/H"=="%1" goto Usage
if /I "/B"=="%1" goto LocalMachine
if /I "/U"=="%1" goto LocalMachine
set RemoteMachineName=%1
set Action=%2
:Parse
if /I "/B" == "%Action%" goto Block
if /I "/U" == "%Action%" goto UnBlock
goto Usage
:Block
Echo Blocking deployment of %ProductName% on %RemoteMachineName%
REG ADD "\\%RemoteMachine%\%REGBlockKey%" /v %REGBlockValue% /t REG_DWORD /d 1 /f
goto End
:UnBlock
Echo Unblocking deployment of %ProductName% on %RemoteMachineName%
REG DELETE "\\%RemoteMachine%\%REGBlockKey%" /v %REGBlockValue% /f
goto End
:LocalMachine
echo LOCAL!
set Action=%1
set RemoteMachine=.
set RemoteMachineName=the local machine
goto Parse
:Usage
Echo.
Echo This tool can be used to remotely block or unblock the delivery of
Echo %ProductName% via Automatic Updates.
Echo.
Echo ------------------------------------------------------------
Echo Usage:
Echo %0 [machine name] [/B] [/U] [/H]
REM [machine name] [/B|U|H]
Echo B = Block %ProductName% deployment
Echo U = Allow %ProductName% deployment
Echo H = Help
Echo.
Echo To block or unblock installation on the local machine use
Echo period ("." with no quotes) as the machine name
Echo.
Echo Examples:
Echo %0 mymachine /B (blocks delivery on machine "mymachine")
Echo.
Echo %0 /U (unblocks delivery on the local machine)
Echo ------------------------------------------------------------
Echo.
:End
===========================================DO NOT COPY THIS LINE====================
What I did was EXTRACT the Setup.exe into (4) Files since I have no Server and don't need the GP template.
Then I opened a CMD Prompt and ran IE9_BLOCKER.CMD /B as per my instructions at the beginning of the post.
The (4) Files after Setup.exe EXTRACT are:
IE9_Blocker.adm
IE9_Blocker.cmd
IE9_BlockerHelp.htm
IE9_BlockerHelp-GPFilteringDialog.jpg
I used Universal Extractor to Extract the Setup.exe File.
http://filehippo.com/download_universal_extractor/
Should read [ System32 ] Folder in my above post.
Really the file just needs to be in the PATH so one does not have to type a long location.
Extract Setup.exe should read Extract IE9_BlockerToolkit.EXE
The time ran out before I could make all corrections.
I'm not good at explaining as I once was. :)
Hope the Post was helpful.
Rick P.
@jmeeks49,
Thanks but is NOT my Script or Batch file. (LOL) (LOL)
What I did was EXTRACT the MS IE9_BlockerToolkit.EXE into (4) Files since I have no Server
and didn't need the GP template.
Then I opened the IE9_Blocker.cmd file and pasted the script plus posted my instructions
on how to use the MS Script.
Guess I should have made and posted a couple of REG Files to make the process easy
but the Blocker File Script belongs to MS.
Since I answered the original posting, felt like it was my Duty to explain to [ amkeew ]
how to implement the solution.
I used Universal Extractor to Extract the IE9_BlockerToolkit.EXE File.
http://filehippo.com/download_universal_extractor/
As I said above, hope my posting is helpful.
Rick P.
From reading the Help Files, the Blocker appears to have been made for Organizations running a server and to use Group Policy as the means to distribute the blocker to individual computers within their organization.
Some individual Editions of Win7 and Vista do not include Group Policy plus most folks do not run a server.
Knowing this, I felt is was better to just take the Blocker a part and post the MS CMD Script so ALL folks could do what you did and protect their machines.
I tested the scripted first before posting it.
Just glad you called my attention to the problem so that I could fix the solution and make it simpler for everyone.
Rick P.
Topic Closed
This topic has been closed to new replies. Please create a new topic instead.
