Software Deployment

is it an MSI or and exe? if its in MSI trying using Active Setup, otherwise, if im not wrong IE is one of the 1st app to use AS.....for each users that logs in.....

I am running the exe created by IEAK. The MSI is only a wrapper MSI.

Any other idea? Was that thing designed to update only the user who installs it and not the other users on the wks?

Shouldn't these settings be managed by group policy...?

http://www.microsoft.com/downloads/details.aspx?FamilyID=ab4655f2-0a3c-42eb-974d-24b2790bf592&displaylang=en

Hi,

It would ease my job, but they dont want to have it managed via GPO. They want the upgrade package installed and configured for every users.

Thks for proposing.


ORIGINAL: MSIPackager

Shouldn't these settings be managed by group policy...?

http://www.microsoft.com/downloads/details.aspx?FamilyID=ab4655f2-0a3c-42eb-974d-24b2790bf592&displaylang=en

OK, well here it says:

"If you do not use an Active Directory environment and Group Policy to manage users' computers, you can use the IEAK Profile Manager to configure and update some browser settings and preferences after deployment."

Have you looked into that?

Also, how are the settings currently implemented for the IE6 install?

they dont want to have it managed via GPOClearly, your client's management must be in a better position to judge which is the best way to manage things like this. After all, wat does Microsoft know?

First, find a nicely-weighted baseball bat...

I hear you VBScab. I am still trying to have these settings managed via AD. At the same time, I need to find an alternative and still searching.

Regarding the IEAK profile manager, this thing is possible but I would need, if my understanding is correct, to host that configuration file (.ins file) on a server and point the browser to that server. I am still surprise that all this cant be packaged and delivered on a single machine, affecting every users on it. I am surpised that there doesn't seem to be an option for one standalone package fits all.

If that is the way they want it at the end, I will have to look at an archaic solution, which is to play with the registry and possibly open hive for every users on the machine. I just cant believe I will have to look at this kind of solution.

which is to play with the registry and possibly open hive for every users on the machineNo, as already mentioned, if an HKCU registry entry is required, Active Setup is the way to go.

VBScab your right but IEAK should, in my opinion, handle all this for me without me creating other actions like active setup. I am still investigating my issue. So far, I discovered that the restrictions are applied to other administrator users and not for regular users. Admin users with restrictions and no resctrictions for regular users... :),.... It looks like something is preventing regular users to do it. Its a lock down environment.

I will update when i find something.

Shouldn't these settings be managed by group policy...?

I agree here...it should be managed by GPs

Hi again, here is a deceptive update from my investigation.

The IE setup.exe file generated by IEAK8 contains many active setup components, some of them simlpy update existing installed components and 3 new one that triggers some action with StubPath. Those are:

ie4uinit -BaseSettings
ie4uinit -UserIconConfig
RunDLL32 IEDKCS32.DLL,BrandIE4 CUSTOM

Those actions only have a single chance to be applied. I did many tests and if a new user in the admin group logs on, among other things, the following keys get populated: HKCU\Software\Policies\Microsoft\Internet Explorer and everything is fine. Those are the keys I need.

If a regular user logs on, the ActiveSetup kicks in and the same keys does not get populated. If I put this last user in the admin group and log back on, Active Setup does not kicks in (normal behavior, it ran already). This last test kind of confirm to me, that ActiveSetup is the one reponsible for applying the restrictions.

I am running out of ideas. I also made a test with a regular user who have change access to all drives, no joy.

I may be left to create some other msi that creates another Active Setup to work around my problem but I am puzzled as to why this does not work in the first place as designed.

Many thanks,

HKCU\Software\Policies\Microsoft\Internet ExplorerOh, look! A Group Policy key. Now who would have expected that? Show it to your client: tell them to grow up, let go of their dogma and do the job properly. Jeez...

+1

If anybody has another idea, it would be appreciated. Thanks for stopping telling me GPO is the way to go, I know this.

I wanted to add a little something here-my organization is now moving to IE8 and I'm the lucky packager. I have found settings in the custsec.inf and seczones.inf stepping on each other during install. I'm comiling a list of items for posting, but if you believe your going crazy with this ancient IEAK tool, YOU'RE NOT.