Internet Explorer 7 is being delivered through Automatic Updates even if you run your own

My environment received a smattering of IE7 installs from some mysterious place last night.  We run all of our machines against our own internal WSUS server which has the IE7 install disabled and it has been so for over a year now.  In my investigation of the mysterious installs of IE7 last night I found that Microsoft updated their article about the “Toolkit to Disable Automatic Delivery of Internet Explorer 7” yesterday.  I did not have the blocker in place because in the documentation for the blocker it says that it is not needed if you run your own internal WSUS server (Organizations do not need to deploy the Blocker Toolkit in environments managed with an update management solution such as Windows Server Update Services or Systems Management Server 2003. Organizations can use those products to fully manage deployment of updates released through Windows Update and Microsoft Update, including Internet Explorer 7, within their environment.)  I have now implemented the GPO which blocks the auto install of IE7 so I hope that I do not receive any more installs going forward.

Has anyone else experienced this?

Internet Explorer 7 is being delivered through Automatic Updates

Published: July 26, 2006 | Updated: October 4, 2007

http://www.microsoft.com/downloads/details.aspx?FamilyId=4516A6F7-5D44-482B-9DBD-869B4A90159C&;displaylang=en

http://technet.microsoft.com/en-us/updatemanagement/bb259685.aspx

http://technet.microsoft.com/en-us/updatemanagement/bb226738.aspx

-Kevin

01C80737.BA7EB180" alt="cid:image001.gif01C74154.C6424A80">

Kevin D. Burney, PMP

IT Director

COIS Mailcode-1516

2105 Bancroft Way – 2^nd floor

Berkeley, CA  94720-1516

(510) 827-8476

berkeley.edu">kburneyberkeley.edu

CHOPS:

http://helpdesk.chance.berkeley.edu/helpdesk

website:

http://cois.berkeley.edu

Hi Kevin,

The IST WSUS sponsored server did not automatically approve the updated version of IE7, which I believe was changed to no longer require Windows Genuine Advantage (WGA) for IE7.  OU administrators using our WSUS are still able to block the installation of IE7 via the GPO “CAMPUS – Block IE7 Install (USE IST WSUS)̶1;.  Alternatively, OU administrators can allow the installation of IE7 via the GPO “CAMPUS –; WSUS”;.