Microsoft has released IE7 for download - http://www.microsoft.com/windows/ie/downloads/default.mspx

Windows Automatic Update

To help admins deploy IE7 to large numbers of machines, this will appear as a High Priority update in Windows Update over in the next couple of weeks. Any machines that are set to Automatically update in Windows Automatic Update will receive IE7 without the user being prompted. Microsoft has released an IE7 blocker toolkit that will stop this process. It does not stop the users manually installing IE7, and it will not stop kaseya deploying IE7, it is purely to hide the update from Windows Automatic Update. The blocker utility can be found here - http://www.microsoft.com/downloads/details.aspx?FamilyID=4516a6f7-5d44-482b-9dbd-869b4a90159c&DisplayLang=en

Once you download this, you need to run this executable. It will extract several files. One of the files is a CMD (batch) file. This has the following switches

IE70Blocker.cmd /B - Blocks distribution
IE70Blocker.cmd /U - Unblocks distribution
IE70Blocker.cmd /H or /? - Displays the help

You can use kaseya to write a script to control your users environments, and block IE7 until you are ready to deploy IE7. I have attached a couple of example scripts (see below).

Kaseya Patch Management

Kaseya's Patch management will not display IE7 as a patch. IE 7 is an application and not a patch or other update. As a matter of policy, we do not install applications, even if MS reports them as High Priority. It is up to our clients to work with their clients to decide when and how to roll out and install any application.

The current patch scan engine does currently detect the existence of IE 7. When the inevitable first security patch gets released for IE 7, kaseya will be ready.

Roll-out plans

Windows Automatic Update

If you wish to roll out IE7 you can use kaseya to turn on windows automatic updates - Patch Mgmt tab -> Windows Auto update -> select the Configure option and select automatic update. Use the IE7 Blocker tool to enable IE7 auto delivery (see above). This will result in machines being patched by Microsoft, completely out of the control of kaseya. As MS makes IE7 available, and depending on the Windows Auto Update setting, IE7 will be deployed.

Kaseya Deployment

If you want to be in full control of the deployment, use Kaseya. Use the IE7 Blocker to ensure that machines are not going to install IE7 automatically from windows update.

Download IE7 for the appropriate platform and use the kaseya scripting to install. There are several command line switches available, these can be accessed by running the installer file with the /? switch - eg. "IE7-WindowsServer2003-x86-enu.exe /?". The most useful will be the /quiet and /passive switches.

Using Kaseya scripting you can write a script to copy the setup file and perform the install as you wish, and with a schedule that you control.

Scripts

These scripts are samples, you may need to alter these for your environment.

IE7 blocker

Script Name: IE7 Blocker
Script Description: The IE7 blocker file from MS extracts several files to a directory. This script copies that directory with all the files to the target machine.
You can alter STEP 3 to /U (for unblock), and /B (for block).


IF True
THEN
Get Variable
Parameter 1 : 10
Parameter 2 :
Parameter 3 : agentTmp
OS Type : 0
Write Directory
Parameter 1 : #agentTmp#\ie7blocker
Parameter 2 : VSASharedFiles\ie7blocker
OS Type : 0
Execute Shell Command
Parameter 1 : #agentTmp#\IE7Blocker\IE70Blocker.cmd /B
Parameter 2 : 1
OS Type : 0
ELSE


IE7 Deployment (XP SP2 x86)

Script Name: IE7 XP SP2 x86
Script Description: This will silently deploy IE7 locally, with no user intervention required.


IF True
THEN
Get Variable
Parameter 1 : 10
Parameter 2 :
Parameter 3 : #agentTmp#
OS Type : 0
Write File
Parameter 1 : #agentTmp#\IE7-WindowsXP-x86-enu.exe
Parameter 2 : VSASharedFiles\IE7-WindowsXP-x86-enu.exe
OS Type : 0
Execute Shell Command
Parameter 1 : #agentTmp#\IE7-WindowsXP-x86-enu.exe /quiet /passive
Parameter 2 : 1
OS Type : 0
ELSE





Legacy Forum Name: IE7 Availability,
Legacy Posted By Username: jnuttall