none
Packaging IE11 prerequisite updates with IEAK RRS feed

  • Question

  • I would like to deploy IE11 using IEAK. I'm trying to package the IE11 prerequisite updates into the exe\msi it outputs but the installer is still trying to go out to the Internet to grab them from Microsoft updates. I want to avoid this. I am adding the updates via the Custom Components phase in the IEAK Wizard but I am not sure if this even works or if I am even using the correct command. I know the cabs are being inserted into the package because the size of the IE11-Setup-Full.exe\msi grows proportionality with the included cab files.

    The expand command keeps getting truncated when I return to the Wizard no matter what I put so I am guessing its incorrect. IEAK documentation is lacking in this area.

    Wednesday, December 10, 2014 10:53 PM

Answers

  • Nevermind, to avoid a restart after updates are installed and when there is no Internet Connection need to use DISM. You can see this in the IE11 log when it run successfully with Internet connection. So something like this will do the trick:

    ::Create temp directory to extract IE11
    MKDIR "C:\temp\IE11"
    ECHO Installing prerequisite updates for Internet Explorer 11
    "%~dp0Windows6.1-KB2670838-x64.msu" /quiet /norestart
    "%~dp0Windows6.1-KB2786081-x64.msu" /quiet /norestart
    "%~dp0Windows6.1-KB2834140-v2-x64.msu" /quiet /norestart
    "%~dp0Windows6.1-KB2882822-x64.msu" /quiet /norestart
    "%~dp0Windows6.1-KB2888049-x64.msu" /quiet /norestart
    ECHO Installing Internet Explorer 11. Please wait...
    ::A reboot is required here, otherwise the IE11 Installer wants to still go out to Internet to check updates
    ::We can avoid this by using DISM instead to install IE11
    "%~dp0IE11-Windows6.1-x64-en-us.exe" /X:%systemdrive%\temp\IE11
    %systemroot%\system32\dism.exe /Online /Add-Package /PackagePath:%systemdrive%\temp\IE11\IE-Win7.CAB /quiet /norestart
    %systemroot%\system32\wusa.exe "%systemdrive%\temp\IE11\IE-Spelling-en.MSU" /quiet /norestart
    %systemroot%\system32\wusa.exe "%systemdrive%\temp\IE11\IE-Hyphenation-en.MSU" /quiet /norestart
    ::Cleanup
    RMDIR C:\temp\IE11 /s /q


    Friday, December 12, 2014 6:38 PM
  • Another thing to be aware of. If you are running this using config mngr 32bit as we are (yes we are moving to 2012 64bit), you will need to adjust the script since 32bit process will not be able to execute the 64bit DISM and WUSA commands in system32. Change where appropriate:

    %systemroot%\system32\

    to

    %systemroot%\sysnative\

    Saturday, December 13, 2014 1:27 AM
  • I will be installing the updates before installing IE via an install script. That said, I am baffled why, even when the prerequisite updates are installed, does the installer still want to go out to the Internet to grab or check for updates. This is not a major nuisance as all our workstations will have Internet access, but it requires that I configure the local system account to use a proxy so it can get out to the Internet. Again, no big deal, I would just rather prevent the IE11 installer from doing this. Wondering if maybe there is an issue with WMI query that checks the workstation for the required updates or I don't have all the necessary updates installed.

    I am installing the following prerequisites:

    • KB2670838
    • KB2786081
    • KB2834140
    • KB2882822
    • KB2888049

    This was determined by installing IE11 on a workstation and checking the updates that were installed with it. I am not following precisely the updates set out in http://support.microsoft.com/kb/2847882. I did try an install package with the mandatory updates included in that KB as well as the non-mandatory updates to no avail. In fact, some of those updates do not even apply any longer. I am guessing they may have been superseded.

    This is what I gathered from SETUPDOWNLOADLIST.TXT extracted from the installer:

    ; The following are prerequisites for installing IE
    [Prerequisites]
    WIN7_SP1=KB2834140 KB2670838 KB2639308 KB2533623 KB2731771 KB2729094 KB2786081 KB2888049 KB2882822

    Now, if I install KB2670838 KB2786081 KB2834140 KB2882822 KB2888049, reboot, then run the IE11 install offline, it will succeed.

    Friday, December 12, 2014 4:40 PM

All replies

  • Hi,

    your IEAK licence requires that the updates be sourced from the MS servers.

    alternatively you could slipstream an image to non-internet connected clients.

    Regards.


    Rob^_^

    Thursday, December 11, 2014 1:21 AM
  • Hi William-D,

    I suggest you deploy the prerequisites via WSUS\SCCM\Group Policy software distribution as a alternative way.

    We've tried to add a cab component in IEAK, but usually find a INF file error in the IE_main log no matter what extract command we use. After a little research, I found the link below:

    How to Package Components for Internet Distribution

    http://msdn.microsoft.com/en-us/library/aa741200(v=vs.85).aspx

    According to the article, the install section of the INF File is an important part of the installation which contain installation information for the component, while the original inf file in the cab can not achieve this, that's why IE insists pulling the updates from internet.

    So personally, if you don't want this happen, I recommend you first deploy the updates with the solutions I mentioned above instead.

    Regards


    Yolanda Zhu
    TechNet Community Support



    Friday, December 12, 2014 4:05 AM
    Moderator
  • I will be installing the updates before installing IE via an install script. That said, I am baffled why, even when the prerequisite updates are installed, does the installer still want to go out to the Internet to grab or check for updates. This is not a major nuisance as all our workstations will have Internet access, but it requires that I configure the local system account to use a proxy so it can get out to the Internet. Again, no big deal, I would just rather prevent the IE11 installer from doing this. Wondering if maybe there is an issue with WMI query that checks the workstation for the required updates or I don't have all the necessary updates installed.

    I am installing the following prerequisites:

    • KB2670838
    • KB2786081
    • KB2834140
    • KB2882822
    • KB2888049

    This was determined by installing IE11 on a workstation and checking the updates that were installed with it. I am not following precisely the updates set out in http://support.microsoft.com/kb/2847882. I did try an install package with the mandatory updates included in that KB as well as the non-mandatory updates to no avail. In fact, some of those updates do not even apply any longer. I am guessing they may have been superseded.

    This is what I gathered from SETUPDOWNLOADLIST.TXT extracted from the installer:

    ; The following are prerequisites for installing IE
    [Prerequisites]
    WIN7_SP1=KB2834140 KB2670838 KB2639308 KB2533623 KB2731771 KB2729094 KB2786081 KB2888049 KB2882822

    Now, if I install KB2670838 KB2786081 KB2834140 KB2882822 KB2888049, reboot, then run the IE11 install offline, it will succeed.

    Friday, December 12, 2014 4:40 PM
  • Nevermind, to avoid a restart after updates are installed and when there is no Internet Connection need to use DISM. You can see this in the IE11 log when it run successfully with Internet connection. So something like this will do the trick:

    ::Create temp directory to extract IE11
    MKDIR "C:\temp\IE11"
    ECHO Installing prerequisite updates for Internet Explorer 11
    "%~dp0Windows6.1-KB2670838-x64.msu" /quiet /norestart
    "%~dp0Windows6.1-KB2786081-x64.msu" /quiet /norestart
    "%~dp0Windows6.1-KB2834140-v2-x64.msu" /quiet /norestart
    "%~dp0Windows6.1-KB2882822-x64.msu" /quiet /norestart
    "%~dp0Windows6.1-KB2888049-x64.msu" /quiet /norestart
    ECHO Installing Internet Explorer 11. Please wait...
    ::A reboot is required here, otherwise the IE11 Installer wants to still go out to Internet to check updates
    ::We can avoid this by using DISM instead to install IE11
    "%~dp0IE11-Windows6.1-x64-en-us.exe" /X:%systemdrive%\temp\IE11
    %systemroot%\system32\dism.exe /Online /Add-Package /PackagePath:%systemdrive%\temp\IE11\IE-Win7.CAB /quiet /norestart
    %systemroot%\system32\wusa.exe "%systemdrive%\temp\IE11\IE-Spelling-en.MSU" /quiet /norestart
    %systemroot%\system32\wusa.exe "%systemdrive%\temp\IE11\IE-Hyphenation-en.MSU" /quiet /norestart
    ::Cleanup
    RMDIR C:\temp\IE11 /s /q


    Friday, December 12, 2014 6:38 PM
  • Another thing to be aware of. If you are running this using config mngr 32bit as we are (yes we are moving to 2012 64bit), you will need to adjust the script since 32bit process will not be able to execute the 64bit DISM and WUSA commands in system32. Change where appropriate:

    %systemroot%\system32\

    to

    %systemroot%\sysnative\

    Saturday, December 13, 2014 1:27 AM
  • We have gone through this for a customer request to upgrade from IE9 to IE11. I normally work with IEAK since years. We always check the PRE patches and then as we had in IE9 the POST hotfixes (Reaching 7-15 pieces for each IE version > Patches you may have to request).

    BLURY FONTS  PATCH KB2670838 (http://support.microsoft.com/kb/2670838/en-us)is not listed as Download Search on MS-Downloads today 11.03.2015 BUT needed for IE11 Setup as i understood.

    I see two problems with reading a few hours now and doing research:

    1) PRE INSTALL patches without the Reboot

    If you install the 9 patches with a batch or script you should

    a) Reboot the client which makes it a Reboot and advance package which some deployment can't handle

    b) Solution > Rebuild the Patch Inventory by running command "%winsysdir%\wbem\wmic.exe qfe"

    2) BLURY PATCH KB2670838

    For existing machines and also for new installation through deployment we have following scenario at almost all customers in Switzerland.

    a) Customer who have a WSUS clean by us have KB2670838 DENY and thus not installed.

    b) The IEAK11 setup DOES install patches which he needs in the background silent. So KB2670838 would be downloaded if the "Computer-accounts" proxy is set right. But we don't want that and we don't want the patch.

    Can someone FROM Microsoft please tell us how to advance in this?

    IE11 IEAK needs the KB2670838 and still in V8 of the KB it will cause blurry FONTS. The patch will in V( detect some GFX cards they have problems and skip the worst like bluescreen.

    Did anybody SOLVE this after release of the IE11 and the KB2670838 ?

    http://www.infoworld.com/article/2609862/microsoft-windows/-blurry-fonts--bug-kb-2670838-persists-with-ie11-and-windows-7.html

    Wednesday, March 11, 2015 12:54 PM
  • There is a HOTFIX https://support.microsoft.com/kb/2898202/de?wa=wsignin1.0 you have to INSTALL If you install the KB2670838 Blurry fonts patch.

    :: KB2670838 Blurry fonts patch
    :: KB2898202 Hotfix for KB2670838

    So you end up with follwing 6 MUST pre patches and 3 optional PLUS the Hotfix for Blurry fonts:

    KB Bei IE11 normal   downlad link zu Binary   vorhanden
    1 KB2834140 JA ZWINGEND Windows6.1-KB2834140-v2-x64.msu
    2 KB2670838 JA mit Hinweis bei   UNINSTALL IE11 auch weg Windows6.1-KB2670838-x64.msu
    HOT KB2898202 JA HOTFIX zu Blurry   Fonts Patch Windows6.1-KB2898202-x64.msu
    3 KB2639308 JA ABER OPTIONAL Windows6.1-KB2639308-x64.msu
    4 KB2533623 JA ZWINGEND Windows6.1-KB2533623-x64.msu
    5 KB2731771 JA ZWINGEND Windows6.1-KB2731771-x64.msu
    6 KB2729094 JA ZWINGEND Windows6.1-KB2729094-v2-x64.msu
    7 KB2786081 JA ZWINGEND Windows6.1-KB2786081-x64.msu
    8 KB2888049 JA ABER OPTIONAL Windows6.1-KB2888049-x64.msu
    9 KB2882822 JA ABER OPTIONAL Windows6.1-KB2882822-x64.msu

    Thursday, March 12, 2015 8:51 AM
  • Actual Setup of IEAK11 is ffective checking the version of the single files as they are. So the WMI refresh will not solve the reboot. You will have to reboot.

    00:01.841: INFO:    Version Check for (KB2834140) of C:\Windows\System32\d3d11.dll: 6.1.7601.17514 >= 6.2.9200.16570 (False)
    00:01.841: WARNING: Checking version for C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll.  The file does not exist.
    00:01.841: INFO:    Version Check for (KB2639308) of C:\Windows\System32\Ntoskrnl.exe: 6.1.7601.17803 >= 6.1.7601.17727 (True)
    00:01.841: INFO:    Version Check for (KB2533623) of C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll: 6.1.7600.16385 >= 6.1.7601.17617 (False)
    00:01.841: INFO:    Version Check for (KB2731771) of C:\Windows\System32\conhost.exe: 6.1.7601.17514 >= 6.1.7601.17888 (False)
    00:01.841: INFO:    Checking for correct version of C:\Windows\Fonts\segoeui.ttf.
    00:01.856: INFO:    Version Check for (KB2786081) of C:\Windows\System32\taskhost.exe: 6.1.7601.17514 >= 6.1.7601.18010 (False)
    00:01.856: INFO:    Version Check for (KB2888049) of C:\Windows\System32\drivers\tcpip.sys: 6.1.7601.17514 >= 6.1.7601.18254 (False)
    00:01.856: INFO:    Version Check for (KB2882822) of C:\Windows\System32\tdh.dll: 6.1.7600.16385 >= 6.1.7601.18247 (False)
    00:02.621: INFO:    Download for KB2834140 initiated. Downloading http://go.microsoft.com/fwlink/?LinkID=303935 -> KB2834140_amd64.MSU.
    00:02.636: INFO:    Download for KB2533623 initiated. Downloading http://go.microsoft.com/fwlink/?LinkID=254722 -> KB2533623_amd64.MSU.
    00:02.636: INFO:    Download for KB2731771 initiated. Downloading http://go.microsoft.com/fwlink/?LinkID=258387 -> KB2731771_amd64.CAB.
    00:02.636: INFO:    Download for KB2786081 initiated. Downloading http://go.microsoft.com/fwlink/?LinkID=273751 -> KB2786081_amd64.CAB.
    00:02.652: INFO:    Download for KB2888049 initiated. Downloading http://go.microsoft.com/fwlink/?LinkID=324542 -> KB2888049_amd64.MSU.
    00:02.668: INFO:    Download for KB2882822 initiated. Downloading http://go.microsoft.com/fwlink/?LinkID=324541 -> KB2882822_amd64.MSU.

    Thursday, March 19, 2015 10:29 AM
  • Hi,

    So does adding the Hotfix KB2898202 with all the other updates to the IEAK package mean that you can deploy out successfully via SCCM now without it failing because it needs to go out to the internet or is William-D's method the only working way to install the updates and IE together without it trying to go out to the internet and with a reboot being required inbetween?

    William-D, for the script to work correctly and see the update files do you just have to put the updates in the same source path as the script (.cmd) is?

    Thanks

    Monday, August 10, 2015 5:59 AM
  • Yes, place the updates in the same folder as the script.
    Monday, August 10, 2015 3:30 PM
  • Hi William

    "Elevated permissions are required to run DISM"

    So how can I use GPO to run the script for all user?

    Thank you.

    Wednesday, September 2, 2015 2:08 PM
  •  Yes! I kept every operation as normal as possible . Where it called for reboot I rebooted . I installed the updates in order ,rebooted as it requested and everything went great . I was dealing with a garage sale laptop W7x64 with a (user corrupted) restore file registry and only God knows what else . My other option was to buy a disc and do a fresh complete install which I didn't care for.I now have SP1 complete and IE11 all up and running .Thanks for the information to  get me up and running on my #3 computer .. Uncle Dardo !

    Wednesday, July 20, 2016 11:33 PM