Microsoft KB Archive/810011

= Internet Explorer 6 Service Pack 1 (SP1) Setup MSI Wrapper Administrators Guide =

PSS ID Number: 810011

Article Last Modified on 10/26/2004

-

The information in this article applies to:


 * Microsoft Internet Explorer 6.0 Service Pack 1

-



IN THIS TASK

 * SUMMARY
 * Overview
 * System Requirements
 * Obtain the Internet Explorer 6 SP1 Setup MSI Wrapper
 * Deployment Scenario
 * Create the Internet Explorer Package
 * Create the Distribution Folder
 * Customize the MSI File
 * Assign the Installation
 * Installation Behavior
 * Rollback Scenario
 * Assign Rollback
 * Rollback Behavior
 * Branding Issues
 * Known Issues
 * REFERENCES



SUMMARY
This article contains the Administrators Guide for the Microsoft Internet Explorer 6 Service Pack 1 (SP1) Setup MSI Wrapper. It provides information and instructions for administrators on how to use the Internet Explorer 6 SP1 Setup MSI Wrapper to deploy Internet Explorer 6 SP1 to client computers.

back to the top

Overview
Internet Explorer Setup requires that you log on to the computer as administrator to run Setup. You must also log on as administrator at the first logon after Setup restarts the computer. These Setup requirements may present difficulties for corporate administrators who plan to upgrade their client computers to the latest version of Internet Explorer. It may be unrealistic for an administrator to physically log on to each computer, especially in large organizations.

The User Rights Deployment (URD) Internet Explorer Administration Kit (IEAK) feature that was introduced in Internet Explorer 5.5 provides a partial solution. The URD feature permits non-administrators to log on to the computer after Internet Explorer Setup is complete. However, it does not address the requirement that you must be logged on as administrator to start Setup. One way to work around this is to use Microsoft Systems Management Server (SMS) to create a custom solution. The Internet Explorer 6 Setup MSI Wrapper was created to provide an alternative, SMS-free solution to the logon requirement to run Setup.

The Internet Explorer Setup MSI Wrapper (Ie6sp1gp.exe and Ie6sp1gp.msi) is intended to help corporate administrators deploy Internet Explorer 6 SP1 to client computers by using the Software Installation component of Group Policy on computers that are running Microsoft Windows 2000 or later. Administrators can use the Software Installation component of Group Policy to install programs to a computer when the computer starts. Using this feature, the installation is granted system-level access to the computer. When you use this feature with the URD feature of IEAK 6, Internet Explorer is installed on the computer regardless of the access level of the user who is logged on when Setup starts and regardless of the access level of the user who is logged on when Setup is complete.

back to the top

System Requirements
To use the Software Installation component of Group Policy to deploy Internet Explorer 6 SP1, you must:
 * Configure the target network to use the Active Directory feature of Microsoft Windows 2000 Server (or later).
 * Make sure that client computers must be running either Microsoft Windows XP, Microsoft Windows 2000, or Microsoft Windows Server 2003.
 * Install and use an .msi file editor (for example, Orca) to customize the Ie6sp1gp.msi file before deployment.

For more information about how to obtain and install the Orca database table editor (Orca.exe), see the Customize the .msi File section later in this article.

back to the top

Obtain the Internet Explorer 6 SP1 Setup MSI Wrapper
To obtain the Internet Explorer 6 SP1 Setup MSI Wrapper, contact Microsoft Product Support Services. For a complete list of Microsoft Product Support Services phone numbers and information about support costs, visit the following Microsoft Web site:

http://support.microsoft.com/default.aspx?scid=fh;EN-US;CNTACTMS

The English version of this feature has the file attributes (or later) that are listed in the following table. The dates and times for these files are listed in coordinated universal time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time tool in Control Panel. Date        Time   Version  Size    File name -- 21-Mar-2003 18:53           52,736  25477_enu_i386_zip.exe 22-Oct-2002 20:16           19,774  Ie 6 sp 1 setup msi wrapper administrators guide.htm 22-Oct-2002 20:16            6,317  Ie 6 sp 1 setup msi wrapper unsupported options.htm 01-Nov-2002 20:05  1.0.2.0  22,016  Ie6sp1gp.exe 01-Nov-2002 20:06           18,432  Ie6sp1gp.msi back to the top

Deployment Scenario
Although there are other scenarios you can follow to use the Internet Explorer 6 SP 1 Setup MSI Wrapper to deploy Internet Explorer 6 SP1, Microsoft recommends that you use the following scenario, which has been thoroughly tested. Note that the use of other scenarios may introduce unpredictable elements, which may leave the client computers in an unstable state.

back to the top

Create the Internet Explorer Package
Use IEAK 6 to create the custom Internet Explorer 6 SP1 installation package. To do so:

Note Because there are several versions of Microsoft Windows, the following steps may be different on your computer. If they are, see your product documentation to complete these steps.
 * 1) Click Start, point to Programs, point to Microsoft IEAK6, and then click Internet Explorer Customization Wizard. On the Welcome to the IEAK page, click Next.
 * 2) On the Stage 1 - Gathering Information page, click Next.
 * 3) On the Destination Folder page, specify a folder in which to create the installation package, and then click Next.
 * 4) On the Language Selection page, specify the language that you want, and then click Next.
 * 5) On the Media Selection page, click to select the Flat (all files in one directory) - Use this media type when you are starting install from another application or for local network installations. No download sites or CD autorun information is needed check box, and then click Next.
 * 6) Follow the instructions on your screen to complete the Stage 1: Gathering Information and Stage 2: Specifying Setup Parameters portions of the Wizard.
 * 7) On the User Experience page of the Stage 3: Customizing Setup portion of the Wizard, click to select the Enable logon after restart with user-level access check box.

Note Make sure that this is the only check box that is selected on this page, and then click Next.
 * 1) Click Next on the remaining pages of the wizard to accept the default selections in the Stage 4: Customizing the Browser and Stage 5: Customizing Components portions of the wizard.
 * 2) On the last page of the wizard, click Finish.

Note This package does not contain any customizations for either Setup or the browser itself. Setup customizations will not be visible because the Internet Explorer Setup user interface (UI) is not visible to the user. You can use the Internet Explorer Maintenance component of Group Policy to configure browser customizations.

back to the top

Create the Distribution Folder
To create the shared distribution folder from which Internet Explorer 6 SP1 is installed:
 * 1) Log on to the server as administrator.
 * 2) Create a shared network folder in which to put the Internet Explorer 6 SP1 package that you created earlier, in the Create the Internet Explorer Package section of this article.
 * 3) Set permissions on the share to allow access to the distribution package. To do so, grant Full Control permissions to administrators of the object (domain, site, or organizational unit) to which Internet Explorer 6 SP1 is deployed, and Read permissions to all users of that object.

back to the top

Customize the .msi File
Use an .msi editor to customize the Ie6sp1gp.msi file. Although you can use a different .msi editor, Microsoft recommends that you use Orca (Orca.exe). The Orca database table editor is included with the Windows Installer Software Development Kit (SDK). To install and use Orca to customize the Ie6sp1gp.msi file:  Install the Windows Installer SDK. To download the Windows Installer SDK, visit the following Microsoft Web site:

http://www.microsoft.com/msdownload/platformsdk/sdkupdate/

 Start Windows Explorer and locate the :\Program Files\Microsoft SDK\Bin\Orca.msi file, where   is the drive where the Windows Installer SDK is installed.

Note This is the default installation location of the Windows Installer SDK. The Orca.msi file may be in a different location on your computer if you installed the Windows Installer SDK in a different folder. Double-click the Orca.msi file, and then follow the instructions in the Orca Setup Wizard to install Orca on your computer. Click Start, point to Programs, and then click Orca. On the File menu, click Open. In the Open dialog box, locate the Ie6sp1gp.msi file, and then click Open. In the Tables column in the left pane, click the Property cell. In the Value column in the right pane, double-click the \\server\share\ie6sp1gp.exe cell that is next to the IE6SetupPath cell in the Property column.</li> Change \\server\share\ie6sp1gp.exe to the path to the shared distribution folder that you created earlier, in the Create the Distribution Folder section of this article.

For example, if you created a distribution folder named MyShare on a server named MyServer, change the value to \\MyServer\MyShare\Ie6sp1gp.exe.</li> On the File menu, click Save, and then quit Orca.</li></ol>

back to the top

Assign the Installation
To assign the installation:
 * 1) Copy the contents of the Flat\Win32\En folder in the Internet Explorer 6 SP1 package that you created earlier, in the Create the Internet Explorer Package section of this article, and copy the Ie6sp1gp.exe and Ie6sp1gp.msi files that you customized earlier, in the Customize the .msi File section of this article, to the shared distribution folder that you created earlier, in the Create the Distribution Folder section of this article.
 * 2) Start the Active Directory Users and Computers snap-in. To do so, click Start, point to Programs, point to Administrative Tools, and then click Active Directory Users and Computers.
 * 3) In the console tree, right-click the object (domain, site, or organizational unit) to which Internet Explorer 6 SP1 will be deployed, and then click Properties.
 * 4) Click the Group Policy tab, select the Group Policy Object that you want, and then click Edit.
 * 5) Under Computer Configuration, expand Software Settings.
 * 6) Right-click Software installation, point to New, and then click Package.
 * 7) In the Open dialog box, type the full Universal Naming Convention (UNC) path to the shared folder that contains the Internet Explorer 6 SP1 package.

IMPORTANT: Do not browse to the location. Make sure that you use the UNC path to the shared folder. For example, \\MyServer\MyShare\Ie6sp1gp.msi.
 * 1) Click Open.
 * 2) Click Assigned, and then click OK. The package is listed in the right pane of the Group Policy window.
 * 3) Close the Group Policy snap-in, click OK, and then quit the Active Directory Users and Computers snap-in.

The Internet Explorer 6 SP1 package is now assigned to the client computers that you specified, and Internet Explorer 6 SP1 is installed automatically the next time the client computers start.

back to the top

Installation Behavior
When a client computer restarts, Group Policy runs Ie6sp1gp.msi, which then starts Ie6sp1gp.exe to run Setup to install Internet Explorer 6 SP1. Note that during this process, a user may log on to the computer. In this situation, a dialog box is displayed on the screen to warn the user that the computer is undergoing an update and will restart automatically when the update completes. The installation and its associated processes run in the system context and cannot be stopped. When Setup completes, the computer automatically restarts. When the computer restarts, any user can log on to the computer to complete the installation of Internet Explorer 6 SP1.

back to the top

Rollback Scenario
If a rollback to a previous version of Internet Explorer is required after you use the Internet Explorer 6 SP 1 Setup MSI wrapper to deploy Internet Explorer 6 SP 1 to client computers, you can use Group Policy to remove Internet Explorer 6 SP1 from the client computers.

back to the top

Assign Rollback
To assign rollback:
 * 1) Start the Active Directory Users and Computers snap-in. To do so, click Start, point to Programs, point to Administrative Tools, and then click Active Directory Users and Computers.
 * 2) In the console tree, right-click the object (domain, site, or organizational unit) that Internet Explorer 6 SP1 is to be removed from, and then click Properties.
 * 3) Click the Group Policy tab, select the Group Policy Object that you want, and then click Edit.
 * 4) Under Computer Configuration, expand Software Settings.
 * 5) Click Software installation, and then in the right pane, click Windows Update: Internet Explorer and Internet Tools.
 * 6) In the Remove Software dialog box, click Immediately uninstall the software from users and computers, and then click OK.
 * 7) Close the Group Policy snap-in, click OK, and then quit the Active Directory Users and Computers snap-in.

Rollback of Internet Explorer 6 SP1 is now assigned to the client computers that you specified, and Internet Explorer 6 SP1 is automatically removed from each client computer the next time the computers start.

back to the top

Rollback Behavior
When a client computer restarts, Group Policy runs Ie6sp1gp.msi, which then starts Ie6sp1gp.exe to run Setup to remove Internet Explorer 6 SP1. Note that during this process, a user may log on to the computer. In this situation, a dialog box is displayed on the screen to warn the user that the computer is undergoing an update and will restart automatically when the update completes. The removal and its associated processes run in the system context and cannot be stopped. When Internet Explorer 6 SP 1 is removed from the computer, the computer automatically restarts. When the computer restarts, only an administrator can log on to the computer to complete the removal of Internet Explorer 6 SP1.

back to the top

Branding Issues
When you use the Internet Explorer 6 SP 1 Setup MSI Wrapper to deploy Internet Explorer 6 SP 1 to client computers, the following Internet Explorer Maintenance settings are rolled back to the default state for all users:
 * Browser title bar
 * Static logos
 * Animated bitmaps
 * Toolbar background bitmaps
 * Search bar
 * Online support page Uniform Resource Locator (URL)
 * User agent string
 * Autoconfig

There are three ways to restore these settings:
 * If these settings are mandatory and must be configured at all times, they can be incorporated directly into the Internet Explorer package that you create by using IEAK 6. Note, however, that these settings will be applied to all users of the computer.
 * If these settings are mandatory, they will be restored the next time the Group Policy Object (GPO) that contains them is changed.
 * These settings are restored at the next logon if they are mandatory and the Internet Explorer Maintenance Policy Processing policy is set to Enabled and Process even if the Group Policy objects have not changed. (To access these settings, in the Group Policy snap-in, expand Administrative Templates, expand System, expand Group Policy, double-click Internet Explorer Maintenance Policy Processing, and then click the Policy tab).

back to the top

Known Issues
The following are known issues with the Internet Explorer 6 SP 1 Setup MSI wrapper: <ul> The Internet Explorer SP1 Setup MSI Wrapper is intended for use in an Active Directory environment only.</li> You must restart the client computers to complete the installation of Internet Explorer. As a result, other scheduled installations may interfere with the Internet Explorer installation, or the Internet Explorer installation may interfere with the other scheduled installations. Therefore, Microsoft recommends that you do not install Internet Explorer in combination with other scheduled installations (such as a Microsoft Office installation that uses the assigned software feature of Software Installation group policy).</li> The Software Installation component of Group Policy does not provide feedback about the installation. Group Policy cannot detect if an installation fails, and it does not try to reinstall the package if the installation is not successful.</li> After you install Internet Explorer 6 SP1 on a Windows XP-based computer (on which a Windows XP service pack is not applied), users cannot log on to the computer. To work around this issue, contact Microsoft Product Support Services. For more information about how to contact Microsoft Product Support Services, visit the following Microsoft Web site:

http://support.microsoft.com/

</li> Windows XP-based computers need time to replicate information after a change is made to a GPO. As a result, the installation of Internet Explorer 6 SP 1 may be delayed until a second (or later) restart of the computer, depending on the amount of time between the change in the GPO and the restart events.</li> After you roll back Internet Explorer 6 SP1, only an administrator can log on to the computer and complete the removal of Internet Explorer 6 SP1.</li> The installation of Internet Explorer 6 SP1 may override some Internet Explorer maintenance settings. For more information, see the Branding Issues section earlier in this article.</li> On computers on which Windows Installer 2.0 is installed (Windows XP, Windows 2000 SP 2 or earlier [if explicitly installed], Windows 2000 SP 3 or later [by default], and Windows Server 2003), and on which a previous URD installation of Internet Explorer was performed, a dialog box that displays a message about upgrading the URD component appears on the screen. If a malicious user clicks the Cancel button, an administrator must log on to the computer after Internet Explorer 6 SP1 Setup is complete.</li> The Internet Explorer SP 1 Setup MSI Wrapper depends on the Software Installation component of Group Policy to function properly. Any other use of the Internet Explorer SP 1 Setup MSI Wrapper can lead to unpredictable results, including the removal of an existing version of Internet Explorer.</li></ul>

back to the top

<div class="references_section">