This FAQ answers commonly asked questions about the Internet Explorer 7 Blocker Toolkit. Click a question to view its answer. To view all the answers at one time, select the View all answers check box.
Q. | Which users will receive Internet Explorer 7 as a high-priority update? |
A. | Users of Windows XP SP2 and Windows Server 2003 SP1 will be offered Internet Explorer 7 as a high-priority update if they have Automatic Updates enabled or if they perform a manual scan for updates using the "Express" install option on the Windows Update or Microsoft Update sites. Internet Explorer 7 will also be offered as a recommended update to any user who performs a manual update scan on the Windows Update and Microsoft Update sites using the "Custom" install option. Note: - Internet Explorer 7 will not install automatically – the Automatic Updates delivery process will include a welcome screen that offers users choices of Install, Don’t Install, and Ask Me Later prior to installation.
- The notification and installation process will not start unless and until a user who is a local administrator logs on to the machine. Users who are not local administrators will not be prompted to install the update and will thus continue using Internet Explorer 6.
- Organizations do not need to deploy the Blocker Toolkit in environments managed with an update management solution such as Windows Server Update Services or Systems Management Server 2003. Organizations can use those products to fully manage deployment of updates released through Windows Update and Microsoft Update, including Internet Explorer 7, within their environment.
For more details on how Internet Explorer 7 will be distributed via Automatic Updates and information on other options for blocking deployment within organizations, please review the TechNet announcement here. |
Q. | When will the Blocker Toolkit be available? |
A. | The Blocker Toolkit is available immediately in the Microsoft Download Center. Microsoft encourages IT administrators who want full control over the deployment of updates to their systems to use Windows Server Update Services (WSUS), a free tool for users of Windows Server, or the more advanced configuration management tool Systems Management Server 2003 (SMS). |
Q. | How long will the blocker mechanism work? |
A. | Once the blocking registry key value is set to its blocked value, automatic delivery of the update will be deactivated permanently as long as the registry key value is not removed or changed. |
Q. | If I need to disable delivery of Internet Explorer 7, why should I use the toolkit provided by Microsoft? Why should I not just disable Automatic Updates entirely? |
A. | Microsoft strongly urges customers not to disable Automatic Updates because it provides the ongoing delivery of critical security and reliability updates to all enabled systems, and disabling Automatic Updates can potentially leave these systems more vulnerable. Microsoft encourages IT administrators who want full control over the deployment of updates to their systems to use Windows Server Update Services (WSUS), a free tool for users of Windows Server, or the more advanced configuration management tool Systems Management Server 2003 (SMS). Microsoft has specifically created this Blocker Toolkit to safely disable and re-enable delivery of Internet Explorer 7 to systems in organizations that cannot use WSUS, SMS, or another update-management solution. |
Q. | Why not block URL access to Windows Update or Microsoft Update? |
A. | This is not recommended because it would stop delivery of all critical security and reliability updates to the organization for all supported versions of the Windows desktop and server operating systems, which would leave all systems more vulnerable. |
Q. | What testing should customers do to validate the Internet Explorer 7 Blocker Toolkit Microsoft is making available before using it? |
A. | Because the Blocker Toolkit being provided by Microsoft relies on a new registry key that is used only for the purpose of disabling and re-enabling delivery of Internet Explorer 7, there should be no additional impact or side effect on the system. No additional testing should be necessary to validate the Toolkit. |
Q. | What registry key is being used to disable delivery of Internet Explorer 7? |
A. | HKLM\SOFTWARE\Microsoft\Internet Explorer\Setup\7.0 |
Q. | What is the key value name and what are the value options? |
A. | The key value name is "DoNotAllowIE70". If the value is '1', automatic delivery of Internet Explorer 7 through Automatic Updates and the Windows Update/Microsoft Update site "Express" install option is disabled. If the value is not '1' or if the key doesn't exist, the system will be offered Internet Explorer 7 by Automatic Updates or if a user performs a manual update scan for high-priority updates via the Windows Update/Microsoft Update sites. |
Q. | Will this Internet Explorer 7 blocking mechanism also block delivery of Internet Explorer 7 through Software Update Services (SUS), Windows Server Update Service (WSUS), or Systems Management Server (SMS)? |
A. | No, this mechanism only blocks automatic delivery of Internet Explorer 7 in environments that do not use SUS, WSUS, or SMS. Internet Explorer 7 can still be deployed using SUS, WSUS, SMS, and other methods even if the blocking mechanism is activated. |
Q. | Will the Blocker Toolkit prevent users from installing Internet Explorer 7 manually on their computers? |
A. | No. The Blocker Toolkit will prevent covered computers from being offered Internet Explorer 7 as a high-priority update automatically through Automatic Updates or through the "Express" install option on the Windows Update/Microsoft Update sites. Internet Explorer 7 will still appear as an optional update that users can select through the "Custom" install option via the Windows Update/Microsoft Update site scans, and the blocker will not prevent users from downloading Internet Explorer 7 from the Microsoft Download Center or installing it from external media. |
Q. | How does the provided script work? |
A. | The script accepts one of two command line options (block and unblock) and creates or removes the registry key that controls whether Internet Explorer 7 is offered automatically to the system (via Automatic Updates or the “Express” install option for manual Windows Update/Microsoft Update site scans). |
Q. | What is the ADM template used for? |
A. | The Administrative Template (.adm file) allows administrators to import the new Group Policy settings to block or unblock automatic delivery of Internet Explorer 7 into their Group Policy environment, and to use Group Policy to centrally execute the action across systems in their environment |
Q. | Will the tool be localized? |
A. | The tool will work without modification on any language edition of the supported operating systems. |