Location: Mail List

Ads

Skyscraper

The GPTalk Mailing List

The GPTALK mailing list is where you can send and receive email related to Windows Group Policy. You must subscribe to the list to send and receive mail from the list. The purpose of the list is to provide a forum for asking and answering technical questions related to Group Policy. Any question is fair game as long as it is related to Windows Group Policy.  The Archives for this list can be found on this page.

 

List Posts

Subject: Re: [gptalk] Blocking and Unblocking the delivery of Internet Explorer 7 and 8
Prev Next
You are not authorized to post a reply.

AuthorMessages
rickym61User is Offline

Posts:18

02/23/2009 2:36 PM  
Hi Booker, I havn't done any troubleshooting myself, but willing to assist
and learn how to. I did find this KB article which may shed some light on
what to look for

http://support.microsoft.com/?kbid=902093

2009/2/23 <xxxxxxxxxxxxxxxx>

> Some additional information I recorded in my notes
>
> 2/16/2009 10:34:36 AM
> Today, I set the IE7 block to disable which "Should" allow IE7 to come
> through automatic updates
>
> I am looking at the log from 2/16 on to see if I notice anything.
>
>
>
>
>
> Booker T. Washington III
> Systems Support Specialist
>
>
> -----Original Message-----
> From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
> On Behalf Of xxxxxxxxxxxxxxxx
> Sent: Monday, February 23, 2009 9:57 AM
> To: xxxxxxxxxxxxxxxx
> Subject: RE: [gptalk] Blocking and Unblocking the delivery of Internet
> Explorer 7 and 8
>
> The log is pretty huge. I found some lines referring to Internet Explorer
> 7. What are good and bad things to look for to start troubleshooting....
>
>
>
> 2009-02-17 04:45:56:517 1144 820 Agent * Found 4 updates
> and 46 categories in search; evaluated appl. rules of 759 out of 1319
> deployed entities
> 2009-02-17 04:45:57:017 1144 820 Agent *********
> 2009-02-17 04:45:57:017 1144 820 Agent ** END ** Agent:
> Finding updates [CallerId = AutomaticUpdates]
> 2009-02-17 04:45:57:017 1144 820 Agent *************
> 2009-02-17 04:45:57:033 1144 7c AU >>## RESUMED ##
> AU: Search for updates [CallId = {29DFA257-A457-4E3E-B725-190ACD07D25E}]
> 2009-02-17 04:45:57:033 1144 7c AU # 4 updates
> detected
> 2009-02-17 04:45:57:033 1144 7c AU #########
> 2009-02-17 04:45:57:033 1144 7c AU ## END ## AU:
> Search for updates [CallId = {29DFA257-A457-4E3E-B725-190ACD07D25E}]
> 2009-02-17 04:45:57:033 1144 7c AU #############
> 2009-02-17 04:45:57:033 1144 7c AU AU setting next
> detection timeout to 2009-02-18 04:36:46
> 2009-02-17 04:45:57:033 1144 7c AU Setting AU
> scheduled install time to 2009-02-18 08:00:00
> 2009-02-17 04:45:57:033 1144 7c AU Auto-approving
> update for download, updateId = {63AD41D6-E29D-42B3-8FCE-46DC28EA45D4}.103,
> ForUx=0, IsOwnerUx=0, HasDeadline=0, IsMinor=0
> 2009-02-17 04:45:57:033 1144 7c AU Auto-approved 1
> update(s) for download (NOT for Ux)
> 2009-02-17 04:45:57:033 1144 7c AU #############
> 2009-02-17 04:45:57:033 1144 7c AU ## START ## AU:
> Download updates
> 2009-02-17 04:45:57:033 1144 7c AU #########
> 2009-02-17 04:45:57:033 1144 7c AU # Approved
> updates = 1
> 2009-02-17 04:45:57:033 1144 7c AU AU initiated
> download, updateId = {63AD41D6-E29D-42B3-8FCE-46DC28EA45D4}.103, callId =
> {1906CE0A-5099-404E-807C-AE11F5C0F21D}
> 2009-02-17 04:45:57:033 1144 7c AU Setting AU
> scheduled install time to 2009-02-18 08:00:00
> 2009-02-17 04:45:57:048 1144 820 DnldMgr *************
> 2009-02-17 04:45:57:048 1144 820 DnldMgr ** START **
> DnldMgr: Downloading updates [CallerId = AutomaticUpdates]
> 2009-02-17 04:45:57:048 1144 820 DnldMgr *********
> 2009-02-17 04:45:57:048 1144 820 DnldMgr * Call ID =
> {1906CE0A-5099-404E-807C-AE11F5C0F21D}
> 2009-02-17 04:45:57:048 1144 820 DnldMgr * Priority = 1,
> Interactive = 0, Owner is system = 1, Explicit proxy = 0, Proxy session id =
> -1, ServiceId = {7971F918-A847-4430-9279-4A52D1EFE18D}
> 2009-02-17 04:45:57:048 1144 820 DnldMgr * Updates to
> download = 1
> 2009-02-17 04:45:57:048 1144 820 Agent * Title =
> Windows Internet Explorer 7 for Windows XP
> 2009-02-17 04:45:57:048 1144 820 Agent * UpdateId =
> {63AD41D6-E29D-42B3-8FCE-46DC28EA45D4}.103
> 2009-02-17 04:45:57:048 1144 820 Agent * Bundles 1
> updates:
> 2009-02-17 04:45:57:048 1144 7c AU # Pending
> download calls = 2
> 2009-02-17 04:45:57:048 1144 7c AU <<## SUBMITTED ##
> AU: Download updates
> 2009-02-17 04:45:57:048 1144 820 Agent *
> {C44BF113-A360-47C2-93AD-D90FB0F29C70}.103
> 2009-02-17 04:45:57:048 1144 820 DnldMgr ***********
> DnldMgr: Regulation Refresh [Svc: {7971F918-A847-4430-9279-4A52D1EFE18D}]
> ***********
> 2009-02-17 04:45:57:048 1144 820 DnldMgr Contacting
> regulation server for 5 updates.
> 2009-02-17 04:45:57:048 1144 820 Misc Validating
> signature for
> C:\WINDOWS\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\wuredir.cab:
> 2009-02-17 04:45:57:064 1144 820 Misc Microsoft signed:
> Yes
> 2009-02-17 04:45:57:064 1144 820 DnldMgr Regulation server
> path:
> http://update.microsoft.com/v6/UpdateRegulationService/UpdateRegulation.asmx.
> 2009-02-17<http://update.microsoft.com/v6/UpdateRegulationService/UpdateRegulation.asmx.%0A2009-02-17> 04:45:57:220 1144 820 DnldMgr Per-Update:
> 74c5384c-88c4-4502-9ff1-ce3fc242abef at rate 0
> 2009-02-17 04:45:57:220 1144 820 DnldMgr Per-Update:
> d5100858-9cd1-40ee-8041-fc9778767e3e at rate 0
> 2009-02-17 04:45:57:220 1144 820 DnldMgr Per-Update:
> 3b26c788-fdb1-48b8-8632-5e37f60e29b3 at rate 0
> 2009-02-17 04:45:57:220 1144 820 DnldMgr Per-Update:
> 3336d3c1-57cc-44f2-b0b0-08aa487a7e33 at rate 0
> 2009-02-17 04:45:57:220 1144 820 DnldMgr * Regulation call
> complete. 0x00000000
> 2009-02-17 04:45:57:220 1144 820 DnldMgr ***********
> DnldMgr: New download job [UpdateId =
> {3336D3C1-57CC-44F2-B0B0-08AA487A7E33}.100] ***********
> 2009-02-17 04:45:57:220 1144 820 DnldMgr Regulation:
> {7971F918-A847-4430-9279-4A52D1EFE18D} - Update
> 3336D3C1-57CC-44F2-B0B0-08AA487A7E33 is "PerUpdate" regulated and can NOT
> download. Sequence 1354 vs AcceptRate 0.
> 2009-02-17 04:45:57:220 1144 820 DnldMgr * Update is not
> allowed to download due to regulation.
> 2009-02-17 04:45:57:236 1144 820 DnldMgr ***********
> DnldMgr: New download job [UpdateId =
> {3B26C788-FDB1-48B8-8632-5E37F60E29B3}.100] ***********
> 2009-02-17 04:45:57:236 1144 820 DnldMgr Regulation:
> {7971F918-A847-4430-9279-4A52D1EFE18D} - Update
> 3B26C788-FDB1-48B8-8632-5E37F60E29B3 is "PerUpdate" regulated and can NOT
> download. Sequence 1354 vs AcceptRate 0.
> 2009-02-17 04:45:57:236 1144 820 DnldMgr * Update is not
> allowed to download due to regulation.
> 2009-02-17 04:45:57:236 1144 820 DnldMgr ***********
> DnldMgr: New download job [UpdateId =
> {74C5384C-88C4-4502-9FF1-CE3FC242ABEF}.100] ***********
> 2009-02-17 04:45:57:236 1144 820 DnldMgr Regulation:
> {7971F918-A847-4430-9279-4A52D1EFE18D} - Update
> 74C5384C-88C4-4502-9FF1-CE3FC242ABEF is "PerUpdate" regulated and can NOT
> download. Sequence 1354 vs AcceptRate 0.
> 2009-02-17 04:45:57:236 1144 820 DnldMgr * Update is not
> allowed to download due to regulation.
> 2009-02-17 04:45:57:236 1144 820 DnldMgr ***********
> DnldMgr: New download job [UpdateId =
> {D5100858-9CD1-40EE-8041-FC9778767E3E}.100] ***********
> 2009-02-17 04:45:57:236 1144 820 DnldMgr Regulation:
> {7971F918-A847-4430-9279-4A52D1EFE18D} - Update
> D5100858-9CD1-40EE-8041-FC9778767E3E is "PerUpdate" regulated and can NOT
> download. Sequence 1354 vs AcceptRate 0.
> 2009-02-17 04:45:57:236 1144 820 DnldMgr * Update is not
> allowed to download due to regulation.
> 2009-02-17 04:45:57:236 1144 820 DnldMgr Regulation:
> {7971F918-A847-4430-9279-4A52D1EFE18D} - Update
> 3336D3C1-57CC-44F2-B0B0-08AA487A7E33 is "PerUpdate" regulated and can NOT
> download. Sequence 1354 vs AcceptRate 0.
> 2009-02-17 04:45:57:236 1144 820 DnldMgr Regulation:
> {7971F918-A847-4430-9279-4A52D1EFE18D} - Update
> 3B26C788-FDB1-48B8-8632-5E37F60E29B3 is "PerUpdate" regulated and can NOT
> download. Sequence 1354 vs AcceptRate 0.
> 2009-02-17 04:45:57:236 1144 820 DnldMgr Regulation:
> {7971F918-A847-4430-9279-4A52D1EFE18D} - Update
> 74C5384C-88C4-4502-9FF1-CE3FC242ABEF is "PerUpdate" regulated and can NOT
> download. Sequence 1354 vs AcceptRate 0.
> 2009-02-17 04:45:57:236 1144 820 DnldMgr Regulation:
> {7971F918-A847-4430-9279-4A52D1EFE18D} - Update
> D5100858-9CD1-40EE-8041-FC9778767E3E is "PerUpdate" regulated and can NOT
> download. Sequence 1354 vs AcceptRate 0.
> 2009-02-17 04:45:57:236 1144 820 DnldMgr ***********
> DnldMgr: New download job [UpdateId =
> {C44BF113-A360-47C2-93AD-D90FB0F29C70}.103] ***********
> 2009-02-17 04:45:58:033 1144 820 DnldMgr * BITS job
> initialized, JobId = {91C87EF6-C2C9-4B33-B407-2830C1243865}
> 2009-02-17 04:45:58:142 1144 820 DnldMgr * Downloading
> from
> http://au.download.windowsupdate.com/msdownload/update/software/uprl/2008/02/ie7-windowsxp-x86-enu_d39b89c360fbaa9706b5181ae4718100687a5326.exeto
> C:\WINDOWS\SoftwareDistribution\Download\d7694bef8bd7032a201cda9934644640\d39b89c360fbaa9706b5181ae4718100687a5326
> (full file).
> 2009-02-17 04:45:58:423 1144 820 Agent *********
> 2009-02-17 04:45:58:423 1144 7c AU AU checked download
> status and it changed: Downloading is not paused
> 2009-02-17 04:45:58:423 1144 820 Agent ** END ** Agent:
> Downloading updates [CallerId = AutomaticUpdates]
> 2009-02-17 04:45:58:423 1144
>
> Booker T. Washington III
> Systems Support Specialist
> 404-894-8716 direct
> 404-385-5188 alt
>
> -----Original Message-----
> From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
> On Behalf Of Rickym61
> Sent: Saturday, February 21, 2009 5:39 AM
> To: xxxxxxxxxxxxxxxx
> Subject: Re: [gptalk] Blocking and Unblocking the delivery of Internet
> Explorer 7 and 8
>
> is it now ok?
>
> as soon as you set it to not blocked, it should on the next check it
> has scheduled for windows update be offered.
>
> are you not seeing this behavior? anything in windowsupdate.log?
>
> On 20/02/2009, xxxxxxxxxxxxxxxx
> <xxxxxxxxxxxxxxxx> wrote:
> > It is set to 0.
> >
> > Thanks for where to check.............
> >
> > It has been at least two days since I set the policy to disabled. Will
> it
> > wait for the next patch Tuesday maybe? I thought as soon as I unblocked
> it,
> > that soon, it would go, ok, hey..... I am free to install now
> >
> >
> >
> >
> >
> >
> > Booker T. Washington III
> > Systems Support Specialist
> >
> > From: xxxxxxxxxxxxxxxx [mailto:
> xxxxxxxxxxxxxxxx]
> > On Behalf Of Rickym61
> > Sent: Friday, February 20, 2009 5:25 PM
> > To: xxxxxxxxxxxxxxxx
> > Subject: Re: [gptalk] Blocking and Unblocking the delivery of Internet
> > Explorer 7 and 8
> >
> > On one of the machines, can you just confirm the value is set to 0/doesnt
> > exist, despite you disabling/removing the policy, could be settings
> haven't
> > changed on the client.
> > Registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet
> > Explorer\Setup\7.0
> > Key value name: DoNotAllowIE70
> > Value
> >
> > Result
> >
> > Key is not defined
> >
> > Distribution is not blocked.
> >
> >
> > 0
> >
> > Distribution is not blocked.
> >
> > 1
> >
> > Distribution is blocked.
> >
> >
> > 2009/2/20
> > <xxxxxxxxxxxxxxxx<mailto:
> xxxxxxxxxxxxxxxx>>
> >
> > Yes, but I want it to happen automatically, when I remove the block and
> it
> > does not seem to install automatically per the windows update
> mechanism....
> >
> >
> >
> >
> >
> >
> >
> > Booker T. Washington III
> >
> > Systems Support Specialist
> >
> >
> >
> > From: xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx
> >
> > [mailto:xxxxxxxxxxxxxxxx<mailto:
> xxxxxxxxxxxxxxxx>]
> > On Behalf Of Rickym61
> > Sent: Friday, February 20, 2009 1:58 PM
> >
> > To: xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>
> > Subject: Re: [gptalk] Blocking and Unblocking the delivery of Internet
> > Explorer 7 and 8
> >
> >
> >
> > The Blocker Toolkit will not prevent users from manually installing
> Internet
> > Explorer 8 as a Recommended update from the Windows Update or Microsoft
> > Update sites, from the Microsoft Download Center, or from external media.
> >
> > more info from faqs
> > IE8 Blocker
> > http://technet.microsoft.com/en-us/updatemanagement/dd365124.aspx
> > IE7 Blocker
> > http://technet.microsoft.com/en-us/updatemanagement/bb259685.aspx
> >
> > Q. Which users will receive Internet Explorer 8 as a high-priority
> update?
> >
> > A. Users of Windows XP SP2 and Windows Server 2003 SP2 will be offered
> > Internet Explorer 8 as a high-priority update if they have Automatic
> Updates
> > enabled or if they perform a manual scan for updates using the "Express"
> > install option on the Windows Update or Microsoft Update sites. Internet
> > Explorer 8 will also be offered as a recommended update to any user who
> > performs a manual update scan on the Windows Update and Microsoft Update
> > sites using the "Custom" install option.
> >
> > Note:
> >
> > * Internet Explorer 8 will not install automatically - the Automatic
> > Updates delivery process will include a welcome screen that offers users
> > choices of Install, Don't Install, and Ask Me Later prior to
> installation.
> > * The notification and installation process will not start unless and
> > until a user who is a local administrator logs on to the machine. Users
> who
> > are not local administrators will not be prompted to install the update
> and
> > will thus continue using Internet Explorer 6 or 7.
> > * Organizations do not need to deploy the Blocker Toolkit in
> environments
> > managed with an update management solution such as Windows Server Update
> > Services or Systems Management Server 2003. Organizations can use those
> > products to fully manage deployment of updates released through Windows
> > Update and Microsoft Update, including Internet Explorer 8, within their
> > environment.
> >
> > For more details on how Internet Explorer 8 will be distributed via
> > Automatic Updates and information on other options for blocking
> deployment
> > within organizations, please review the TechNet announcement at
> > here<http://technet.microsoft.com/en-us/updatemanagement/dd365125.aspx>.
> >
> > Error! Filename not specified. Q. Which users will receive Internet
> Explorer
> > 8 as an important update?
> >
> > A. Users of Windows Vista and Windows Server 2008 will be offered
> Internet
> > Explorer 8 as an important update if they have Automatic Updates enabled
> or
> > if they perform a manual scan for updates using the "Express" install
> option
> > on the Windows Update or Microsoft Update sites. Internet Explorer 8 will
> > also be offered as a recommended update to any user who performs a manual
> > update scan on the Windows Update and Microsoft Update sites by using the
> > Custom install option.
> >
> > Note:
> >
> > * Internet Explorer 8 will not install automatically - the Automatic
> > Updates delivery process will include a welcome screen that offers users
> > choices of Install, Don't Install, and Ask Me Later prior to
> installation.
> > * The notification and installation process will not start unless and
> > until a user who is a local administrator logs on to the machine. Users
> who
> > are not local administrators will not be prompted to install the update
> and
> > will thus continue using Internet Explorer 6 or 7.
> > * Organizations do not need to deploy the Blocker Toolkit in
> environments
> > managed with an update management solution such as Windows Server Update
> > Services or Systems Management Server 2003. Organizations can use those
> > products to fully manage deployment of updates released through Windows
> > Update and Microsoft Update, including Internet Explorer 8, within their
> > environment.
> >
> >
> >
> >
> > 2009/2/19 Darren Mar-Elia <xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>>
> >
> > Booker-
> > I've not personally use this blocker setting but is it simply blocking
> the
> > Windows Update from being downloaded or blocking the IE setup executable?
> > Have you done an RSOP against a sample machine to make sure its receiving
> > the unblocking setting?
> >
> > Darren
> >
> >
> >
> > From: xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx
> >
> > [mailto:xxxxxxxxxxxxxxxx<mailto:
> xxxxxxxxxxxxxxxx>]
> > On Behalf Of
> > xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx
> >
> > Sent: Thursday, February 19, 2009 2:57 PM
> > To: xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>
> > Subject: [gptalk] Blocking and Unblocking the delivery of Internet
> Explorer
> > 7 and 8
> >
> >
> >
> > I downloaded and loaded the Blocker toolkit for both IE7 and IE8.
> >
> >
> >
> > Now I want to "unblock" IE7
> >
> >
> >
> > At first, I just removed the policy, but the computers did not download
> and
> > install IE7. Next, I disabled the policy thinking that maybe I needed to
> be
> > more proactive to make sure that the policy was reversed, but my
> computers
> > STILL did not seem to download and install IE7
> >
> >
> >
> > What am I missing?
> >
> >
> >
> > Booker T. Washington III
> >
> > Systems Support Specialist
> >
> >
> >
> >
> >
> >
>
> --
> Sent from my mobile device
> Subscriber Help: http://www.gpoguy.org/Subscribers-FAQ.aspx
> List Info: http://www.gpoguy.com/GPTalk-Mailing-List.aspx
> List archive (on-site):
> http://www.gpoguy.com/GPTalk-Mailing-List.aspx#archive
> List archive (off-site): http://www.freelists.org/archives/gptalk
> Subscriber Help: http://www.gpoguy.org/Subscribers-FAQ.aspx
> List Info: http://www.gpoguy.com/GPTalk-Mailing-List.aspx
> List archive (on-site):
> http://www.gpoguy.com/GPTalk-Mailing-List.aspx#archive
> List archive (off-site): http://www.freelists.org/archives/gptalk
> Subscriber Help: http://www.gpoguy.org/Subscribers-FAQ.aspx
> List Info: http://www.gpoguy.com/GPTalk-Mailing-List.aspx
> List archive (on-site):
> http://www.gpoguy.com/GPTalk-Mailing-List.aspx#archive
> List archive (off-site): http://www.freelists.org/archives/gptalk
>

You are not authorized to post a reply.
Forums >GPTalk >GPTalk Mailing List > Re: [gptalk] Blocking and Unblocking the delivery of Internet Explorer 7 and 8



ActiveForums 3.7

Members

MembershipMembership:
Latest New UserLatest:carmicklec
New TodayNew Today:1
New YesterdayNew Yesterday:1
User CountOverall:1399

People OnlinePeople Online:
VisitorsVisitors:0
MembersMembers:0
TotalTotal:0

Online NowOnline Now:

Ads

Banner Inv
Copyright 2009 by GPOGUY.COM
Terms Of Use