blocking IE8

I have this registry set on some workstations

HKLM\Software\Microsoft\Internet Explorer\Setup\8.0\DoNotAllowIE80 = 1

Seems WSUS ignores this setting. Any tips how to block IE8?
--

"GEB" <> wrote in message
news:...
>
> I have this registry set on some workstations
>
> HKLM\Software\Microsoft\Internet Explorer\Setup\8.0\DoNotAllowIE80 = 1
>
> Seems WSUS ignores this setting.

Correct. The Windows Update Agent ignores ALL such settings when obtaining
updates from a WSUS Server.

> Any tips how to block IE8?

Don't Approve it?


Strictly speaking, create a subgroup of each of your desktop groups called
NoIE8 (or some such name). Allow all of the approvals to be inherited from
the parent group(s) -- which they will be, by default. And then explicitly
set IE8 to Not Approved for the NoIE8 group. Then reassign your "Don't Want
IE8" computers to the NoIE8 group.

Or, you can also do the opposite. Create a single group called (DeployIE8),
approve IE8 for only that group, and then ADD machines to that group so they
get IE8 deployed.


--
Lawrence Garvin, M.S., MCITP:EA, MCDBA
Principal/CTO, Onsite Technology Solutions, Houston, Texas
Microsoft MVP - Software Distribution (2005-2009)

My Blog: http://onsitechsolutions.spaces.live.com
Microsoft WSUS Website: http://www.microsoft.com/wsus
My MVP Profile: http://mvp.support.microsoft.com/pro...awrence.Garvin

Great, thanks for the tip!