- Managing shared mailboxes in Office 365 with PowerShell - Thu, May 5 2016
- Managing shared mailboxes in Office 365 with the GUI - Wed, May 4 2016
- Installing and configuring the Enhanced Mitigation Experience Toolkit (EMET) - Wed, Mar 16 2016
If your organization is like mine, you probably aren’t running out to install the latest version of Internet Explorer on all your computers as soon as it is available for download. Chances are, you have internal web-based applications that are either developed in-house or by a 3rd party vendor that, at the very least, will need testing and possibly updates so that they will be fully compatible.
So, fast forward a few months and your applications are ready to support the latest IE! There’s only one problem, Microsoft has now released several updates and you need to make sure that all your computers have the latest and greatest updates when you deploy IE.
Update manually ^
Yeah right, huh? For a handful of computers, this is probably feasible (especially for your testing group). But, if you support more than a couple of dozen, you’ll probably want a more automated process.
Method 1 for updating manually is to run Windows Update to install the update. Just remember, if you’ve hidden IE updates, you’ll need to go into ‘Restore hidden updates’ to make them appear again.
After running the update, you’re done!
Check Internet Explorer version
Method 2 involves downloading IE manually and running the executable. In the event that Windows Update is disabled in your environment or otherwise not a viable way to install an IE update manually, IE 9 can be downloaded here and IE 10 can be downloaded here. Future versions will be listed on the main IE download page.
Install Internet Explorer manually
In both of these scenarios, the installer accesses Microsoft update servers, downloads the latest updates, and includes them as part of the install process.
Deploy with a system management tool ^
If you’re using a systems management product like System Center Configuration Manager, LANDesk, Altiris, or PDQ Deploy, to deploy software, you can use also it to push out an install Internet Explorer.
First, we’ll need to download the installer from Microsoft (see the Update Manually section). Running the installer with the /? switch will show you all of the options that are available for installing IE.
Internet Explorer setup command line switches
The key switches you’ll want are:
- /passive – Runs the installer visible to the end user, but without the ability to give input.
- /quiet – Run the installer without showing the end user an interface.
- /norestart – Doesn’t require a restart even if one is required to complete install.
- /forcerestart – Forces a restart after install if one is necessary.
In my typical deployment, I use /quiet and /forcerestart and schedule the install for an off-service time of the day. So, the installer with switches would look something like this:
IE10-Windows6.1-x64-en-us.exe /quiet /forcerestart
This would update Internet Explorer to version 10 on Windows 7 x64 with no UI visible to the user and force a restart if one is necessary. The key with this method of install is that the client system has to have an Internet connection. During the install process, the installer reaches out to Microsoft update servers and pulls down the latest IE cumulative update.
Install without internet connectivity ^
In the event you have clients that can’t access the Internet or are firewalled/proxied in some way that prevents them from accessing Microsoft update servers, you’ll need to include the latest Internet Explorer Cumulative Security Update as part of your update.
To find the latest IE Cumulative Security Update, fire up your favorite search engine and search for “Internet Explorer Cumulative Security Update.” Based on the search results, it should be easy to tell which the latest is.
When installing IE, you’ll need to ensure that the installer is set to not update and not reboot. For example:
IE10-Windows6.1-x64-en-us.exe /quiet /update-no /norestart
Once the update completes, you’ll need to deploy the .msu file that contains the IE cumulative security update. MSU files can be scripted by using wsua.exe; running that executable with a /? gives us the command line switches that are available.
Windows Update Standalone Installer
To install the update, run the wusa.exe command followed by the path to the update, a switch to set the display level, and a switch the make the system reboot if necessary.
wusa.exe IE10-Windows6.1-KB2846071-x64.msu /quiet /forcerestart
Once the system reboots, it will have IE with the latest cumulative update.