Hi,

I created a package with IEAK8 for deployment of IE8 on an existing IE6 environment. It works fine excepts that some very minor settings like disable changing home page or disable change history settings are only applied to the admin account which is the one installing the IE8.

Any users: new or existing wont get the new settings. Am i missing something? Does this IE kit creates only package which settings ap[plies only to current user?

Thanks
0 Comments   [ + ] Show Comments

Comments

Please log in to comment

Rating comments in this legacy AppDeploy message board thread won't reorder them,
so that the conversation will remain readable.

Answers

0
is it an MSI or and exe? if its in MSI trying using Active Setup, otherwise, if im not wrong IE is one of the 1st app to use AS.....for each users that logs in.....
Answered 02/10/2010 by: PackageExpert
Blue Belt

Please log in to comment
0
I am running the exe created by IEAK. The MSI is only a wrapper MSI.

Any other idea? Was that thing designed to update only the user who installs it and not the other users on the wks?
Answered 02/10/2010 by: PackagerWannaBe
Orange Senior Belt

Please log in to comment
0
Shouldn't these settings be managed by group policy...?

http://www.microsoft.com/downloads/details.aspx?FamilyID=ab4655f2-0a3c-42eb-974d-24b2790bf592&displaylang=en
Answered 02/10/2010 by: MSIPackager
Third Degree Black Belt

Please log in to comment
0
Hi,

It would ease my job, but they dont want to have it managed via GPO. They want the upgrade package installed and configured for every users.

Thks for proposing.


ORIGINAL: MSIPackager

Shouldn't these settings be managed by group policy...?

http://www.microsoft.com/downloads/details.aspx?FamilyID=ab4655f2-0a3c-42eb-974d-24b2790bf592&displaylang=en

Answered 02/10/2010 by: PackagerWannaBe
Orange Senior Belt

Please log in to comment
0
OK, well here it says:

"If you do not use an Active Directory environment and Group Policy to manage users' computers, you can use the IEAK Profile Manager to configure and update some browser settings and preferences after deployment."

Have you looked into that?

Also, how are the settings currently implemented for the IE6 install?
Answered 02/10/2010 by: MSIPackager
Third Degree Black Belt

Please log in to comment
0
they dont want to have it managed via GPOClearly, your client's management must be in a better position to judge which is the best way to manage things like this. After all, wat does Microsoft know?

First, find a nicely-weighted baseball bat...
Answered 02/10/2010 by: VBScab
Red Belt

Please log in to comment
0
I hear you VBScab. I am still trying to have these settings managed via AD. At the same time, I need to find an alternative and still searching.

Regarding the IEAK profile manager, this thing is possible but I would need, if my understanding is correct, to host that configuration file (.ins file) on a server and point the browser to that server. I am still surprise that all this cant be packaged and delivered on a single machine, affecting every users on it. I am surpised that there doesn't seem to be an option for one standalone package fits all.

If that is the way they want it at the end, I will have to look at an archaic solution, which is to play with the registry and possibly open hive for every users on the machine. I just cant believe I will have to look at this kind of solution.
Answered 02/10/2010 by: PackagerWannaBe
Orange Senior Belt

Please log in to comment
0
which is to play with the registry and possibly open hive for every users on the machineNo, as already mentioned, if an HKCU registry entry is required, Active Setup is the way to go.
Answered 02/10/2010 by: VBScab
Red Belt

Please log in to comment
0
VBScab your right but IEAK should, in my opinion, handle all this for me without me creating other actions like active setup. I am still investigating my issue. So far, I discovered that the restrictions are applied to other administrator users and not for regular users. Admin users with restrictions and no resctrictions for regular users... :),.... It looks like something is preventing regular users to do it. Its a lock down environment.

I will update when i find something.
Answered 02/10/2010 by: PackagerWannaBe
Orange Senior Belt

Please log in to comment
0
Shouldn't these settings be managed by group policy...?

I agree here...it should be managed by GPs
Answered 02/11/2010 by: slay_u
Orange Belt

Please log in to comment
0
Hi again, here is a deceptive update from my investigation.

The IE setup.exe file generated by IEAK8 contains many active setup components, some of them simlpy update existing installed components and 3 new one that triggers some action with StubPath. Those are:

ie4uinit -BaseSettings
ie4uinit -UserIconConfig
RunDLL32 IEDKCS32.DLL,BrandIE4 CUSTOM

Those actions only have a single chance to be applied. I did many tests and if a new user in the admin group logs on, among other things, the following keys get populated: HKCU\Software\Policies\Microsoft\Internet Explorer and everything is fine. Those are the keys I need.

If a regular user logs on, the ActiveSetup kicks in and the same keys does not get populated. If I put this last user in the admin group and log back on, Active Setup does not kicks in (normal behavior, it ran already). This last test kind of confirm to me, that ActiveSetup is the one reponsible for applying the restrictions.

I am running out of ideas. I also made a test with a regular user who have change access to all drives, no joy.

I may be left to create some other msi that creates another Active Setup to work around my problem but I am puzzled as to why this does not work in the first place as designed.

Many thanks,
Answered 02/11/2010 by: PackagerWannaBe
Orange Senior Belt

Please log in to comment
0
HKCU\Software\Policies\Microsoft\Internet ExplorerOh, look! A Group Policy key. Now who would have expected that? Show it to your client: tell them to grow up, let go of their dogma and do the job properly. Jeez...
Answered 02/12/2010 by: VBScab
Red Belt

Please log in to comment
0
+1
Answered 02/12/2010 by: MSIPackager
Third Degree Black Belt

Please log in to comment
0
If anybody has another idea, it would be appreciated. Thanks for stopping telling me GPO is the way to go, I know this.
Answered 02/12/2010 by: PackagerWannaBe
Orange Senior Belt

Please log in to comment
0
I wanted to add a little something here-my organization is now moving to IE8 and I'm the lucky packager. I have found settings in the custsec.inf and seczones.inf stepping on each other during install. I'm comiling a list of items for posting, but if you believe your going crazy with this ancient IEAK tool, YOU'RE NOT.
Answered 07/28/2010 by: Deployist
Yellow Belt

Please log in to comment
Answer this question or Comment on this question for clarity