Starting Tuesday August 25, 2009, Internet Explorer 8 will be made available as “update rollups” via WSUS (Windows Server Update Services). This is critical for customers who manage their desktops via WSUS; they need to be aware of these updates and make necessary preparation to insure there are no unintended upgrades to Internet Explorer 8 on their desktops.
If you do not want to deploy IE8 via WSUS, follow these steps to ensure you retain control over how and when IE8 is deployed in your environment.
Before August 25, 2009
1. Turn off auto-approve for “Update rollup” packages in Windows Server Update Services, and approve the updates manually. Note: Even if Auto-Approve for “Update rollup” is on, the IT Admin is still be required to approve the IE8 EULA before IE is sent to downstream clients.
After August 25, 2009
1. Synchronize your WSUS server
2. Decline the Internet Explorer 8 updates
3. If business requirements are to auto-approve update rollup packages, you can re-enable auto update for “Update rollups”
For more deployment information, refer to TechNet at http://technet.microsoft.com/ie or use the Internet Explorer Administration Kit http://technet.microsoft.com/en-us/ie/bb219517.aspx to generate an MSI installer and distribute it using Systems Management Server or Group Policy.