Answered by:
Problem with Internet Explorer upgrade to 11 version via SCCM

Question
-
Hi,
I'm trying upgrade IE for workstations in our organisation. To do this I have pushed 2841134 update. Unfortunately, on many devices in software Center I have got status "FAILED". I checked IE11.log in C:\Windows folder and I have found this:
ERROR: WMI query for Hotfixes timed out. Query string: 'Select HotFixID from Win32_QuickFixEngineering WHERE HotFixID="KB2729094"' Error: 0x00040004 (262148).
INFO: KB2729094 could not be download is not installed.
ERROR: Couldn't create setup troubleshooting shortcut on the desktop. HRESULT: 0x80070002,
INFO: Setup exit code: 0x00009C47 (40007) - Required updates failed to download.
Next step I have pushed misisng update on devices but it hasn't fixed issue. I checked in SCCM status of this update and I have found:
"Required: 0
Installed: 3178"
That means misisng KB not will be installed. Any ideas why it is happened and how to fix it? Thank you.
Wednesday, February 24, 2016 10:17 AM
Answers
-
IE11 requires some KB, that needs to be installed before the actual IE11 Installation. Normally those KBs will be downloaded by the IE11 Installer. In most Enterprise this won't work because the Clients or more specific the ConfigMgr Client (Local System Account) does not have Internet Access.
You can try to create your own IE11 Installation Package using IEAK and include those KBs.
But i had some issues for myself, even with IEAK, and ended up deploying IE11 as a Software Update.
See here for more information
https://social.technet.microsoft.com/Forums/en-US/046613ba-7fee-4bc7-9eea-3993b9d9e97d/ieak-deployment-showing-successful-but-not-installed?forum=configmanagerapps
Simon Dettling | msitproblog.com | @SimonDettling
- Edited by Simon Dettling Wednesday, February 24, 2016 10:24 AM
- Marked as answer by Jimmy LSMicrosoft contingent staff Thursday, February 25, 2016 9:11 AM
- Unmarked as answer by Jimmy LSMicrosoft contingent staff Thursday, February 25, 2016 9:11 AM
- Proposed as answer by Jimmy LSMicrosoft contingent staff Thursday, February 25, 2016 9:11 AM
- Marked as answer by Jimmy LSMicrosoft contingent staff Friday, March 4, 2016 9:24 AM
Wednesday, February 24, 2016 10:22 AM
All replies
-
IE11 requires some KB, that needs to be installed before the actual IE11 Installation. Normally those KBs will be downloaded by the IE11 Installer. In most Enterprise this won't work because the Clients or more specific the ConfigMgr Client (Local System Account) does not have Internet Access.
You can try to create your own IE11 Installation Package using IEAK and include those KBs.
But i had some issues for myself, even with IEAK, and ended up deploying IE11 as a Software Update.
See here for more information
https://social.technet.microsoft.com/Forums/en-US/046613ba-7fee-4bc7-9eea-3993b9d9e97d/ieak-deployment-showing-successful-but-not-installed?forum=configmanagerapps
Simon Dettling | msitproblog.com | @SimonDettling
- Edited by Simon Dettling Wednesday, February 24, 2016 10:24 AM
- Marked as answer by Jimmy LSMicrosoft contingent staff Thursday, February 25, 2016 9:11 AM
- Unmarked as answer by Jimmy LSMicrosoft contingent staff Thursday, February 25, 2016 9:11 AM
- Proposed as answer by Jimmy LSMicrosoft contingent staff Thursday, February 25, 2016 9:11 AM
- Marked as answer by Jimmy LSMicrosoft contingent staff Friday, March 4, 2016 9:24 AM
Wednesday, February 24, 2016 10:22 AM -
Hi Simon,
Thank you for answer but I'm not sure that is exactly what I need. I don't need prepare my own IE version. As you see in logs, there is only one KB missing and of course it can't be installed automatically with users rights. Problem is... I want to deploy this missing update but SCCM inform me it is not required. That is strange. I'm sure, when missing KB will be installed then IE11 upgrade will start correctly.
Wednesday, February 24, 2016 11:05 AM -
We have loads of problems with IE11 too.
Try deploying all these updates to the device as software updates, and then seeing if 2841134 will install:
KB2729094
KB2786081
KB2834140
KB2888049
KB2731771
KB2533623
KB2670838
KB2639308
KB2882822
Wednesday, February 24, 2016 11:13 AM -
There's bug in the IE11 setup that causes that error message. You may find that even though KB2729094 is installed that error still comes up in the IE11_main.log. Also some of the pre-requisites have been superseded as well since this KB was published https://support.microsoft.com/en-gb/kb/2847882.
I've tested installing via Task Sequence (to allow for two reboots, one after pre-req and one after IE install) and with using the IEAK.
As Simon mentioned IEAK is not great, it attempts to go to the outside world for the pre-reqs even though you package them in your install. Some devices fail - proxy problems.
The only successful way to get this out was to create a package and inject the pre-reqs and IE cab file. This gets round any rebooting after pre-req issues.
Create a package in ConfigMgr with all the pre-reqs and IE11.cab in the source. Create a .bat file and add this script. Note the pre-reqs these are different to the ones listed in the KB and by Mikhail.
ECHO OFF
ECHO Installing IE 11 prerequisite: KB2670838
%windir%\sysnative\dism.exe /online /add-package /packagepath:Windows6.1-KB2670838-x64.cab /quiet /norestart /LogPath:C:\windows\Temp\KB2670838DISM.log
ECHO Installing IE 11 prerequisite: KB2834140
%windir%\sysnative\dism.exe /online /add-package /packagepath:Windows6.1-KB2834140-v2-x64.cab /quiet /norestart /LogPath:C:\windows\Temp\KB2834140DISM.log
ECHO Installing IE 11 prerequisite: KB2726535
%windir%\sysnative\dism.exe /online /add-package /packagepath:Windows6.1-KB2726535-x64.cab /quiet /norestart /LogPath:C:\windows\Temp\KB2726535DISM.log
ECHO Installing IE 11 prerequisite: KB2729094
%windir%\sysnative\dism.exe /online /add-package /packagepath:Windows6.1-KB2729094-v2-x64.cab /quiet /norestart /LogPath:C:\Windows\Temp\KB2729094DISM.log
ECHO Installing IE 11 prerequisite: KB2786081
%windir%\sysnative\dism.exe /online /add-package /packagepath:Windows6.1-KB2786081-x64.cab /quiet /norestart /LogPath:C:\windows\Temp\KB2786081DISM.log
ECHO Installing IE 11 prerequisite: KB2888049
%windir%\sysnative\dism.exe /online /add-package /packagepath:Windows6.1-KB2888049-x64.cab /quiet /norestart /LogPath:C:\windows\Temp\KB2888049DISM.log
ECHO Installing IE 11 prerequisite: KB2882822
%windir%\sysnative\dism.exe /online /add-package /packagepath:Windows6.1-KB2882822-x64.cab /quiet /norestart /LogPath:C:\windows\Temp\KB2882822DISM.log
ECHO Installing IE 11 Main Application
%windir%\sysnative\dism.exe /online /add-package /packagepath:IE-Win7.cab /quiet /norestart /LogPath:C:\windows\Temp\IE11dism.log
ECHO Installing IE cumulative security update
%windir%\sysnative\dism.exe /online /add-package /packagepath:IE11-Windows6.1-KB3104002-x64.cab /quiet /norestart /LogPath:C:\windows\Temp\KB3104002DISM.log
Cheers Paul | http://sccmentor.wordpress.com
Wednesday, February 24, 2016 11:40 AM -
As you see in my post, I can't install KB2729094 :-(Wednesday, February 24, 2016 12:00 PM
-
I can't install KB2729094 :-(
Does the Installation also fail when you try to install it manually as Paul said?Simon Dettling | msitproblog.com | @SimonDettling
Wednesday, February 24, 2016 12:05 PM -
I have connected with user PC. In IE11 log there is info about missing update. I have started manually installation of missing update and I have got "Update already installed". Unfortunately IE11 still inform me this update is missing.
What is strange - on another PC I have that same situation. And today users write me "Thank you for upgrade my IE11"!! :-) I was shocked beacuse - it has been fixed itself and IE found missing update. MADNESS!!!!
Thursday, February 25, 2016 1:30 PM -
But on another machine it will fail. That error is a bug in the IE11 setup
Cheers Paul | http://sccmentor.wordpress.com
Thursday, February 25, 2016 2:36 PM -
As said, I had similar issues and ended up deploying IE11 as a Software Update, which worked very well for me. :)
Simon Dettling | msitproblog.com | @SimonDettling
Thursday, February 25, 2016 2:40 PM