none
install IE 11 fully patched using IEAK RRS feed

  • Question

  • I am using the IEAK to create an install package for my company so that I can deploy IE11 before the deadline.  We currently have IE10 installed across the board - fully patched.

    In the IEAK, there is a limit of 10 custom components you can add to the package.  There are 9 prerequisites.  There are 16 (as of this writing) patches/security updates.  

    The IE install is around 100MB + 40MB for the prerequisites.  The updates that should be installed after this total around 600MB.  The question is:  how are enterprises supposed to deploy IE11 fully patched when the limit in the tool to create a deployment package is 10 items and I need at least 16?  Assume I could deploy the prerequisites beforehand.  

    We also use SCCM to deploy updates.  I would like to deploy IE11 and reboot 1 time.  (We don't auto-reboot, but that really doesn't matter for deployment)  As it stands now, I would have to run the IE11 install 1 night, reboot the machine after installing.  Then the next night watch all of the machines in our company download 600MB each of patches, and install them and wait for a reboot for the IE versions to be secured and up to date.  

    Two ways to avoid this would be for Microsoft to 1) allow more (like unlimited) items in the custom components list of the IEAK or 2) create fully patched versions of IE for release (probably not possible due to the OS hooks, but still)  I would like to be able to package this and deploy - not package and then wait for everyone to update.

    Am I missing an obvious solution here?



    Spencer Williams

    Thursday, September 3, 2015 3:42 PM

Answers

  • Hi Spencer ,

    Base on my knowledge, in IEAK, components does not equal to updates, you don't need to consider adding all updates to the deployment package.

    As you mentioned, you can deploy an application first ,and patch it afterwards.

    Best regards,


    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    Niko Cheng
    TechNet Community Support

    Tuesday, September 8, 2015 7:27 AM

All replies

  • So it is not possible?  I am forced to deploy an unsecure application first - then patch it afterwards, yes?

    Spencer Williams

    Friday, September 4, 2015 2:52 PM
  • Hi Spencer ,

    Base on my knowledge, in IEAK, components does not equal to updates, you don't need to consider adding all updates to the deployment package.

    As you mentioned, you can deploy an application first ,and patch it afterwards.

    Best regards,


    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    Niko Cheng
    TechNet Community Support

    Tuesday, September 8, 2015 7:27 AM
  • I'd like to push IE 11 and have it fully patched before the user ever gets to their desktop. The above scenario wants us to

    1) Push IE 11

    2) Reboot

    3) Let the client log in and wait for patches to install

    Surely there is a better way? I've tried the IEAK 11, but I'm unable to get post-install patches to successfully install. Any help is appreciated.

    Monday, October 12, 2015 3:39 PM