Prevent, Block and Disable Automatic Updates Install of Internet Explorer 7 (IE7) for Controlled Upgrade
The final RTM build of Internet Explorer 7 (IE7) will be released, distributed and installed automatically as a High Priority Update by Automatic Updates, and Windows Update and Microsoft Update sites. Internet Explorer 7 will be available for users of genuine Windows XP SP2, Windows XP 64-bit Edition, and Windows Server 2003 SP1. As one of the delivery channel of IE7 is Automatic Updates, if you have configured your to automatically update your Windows, then IE7 setup files will be automatically download, consuming your bandwidth. If you’re a system administrator for many computers prefer for manual deployment with just one download, or want to control or delay the upgrade process to IE7 or simply dislike IE7, then you should take action in order to prevent and block the Automatic Updates’ downloading and installation of Internet Explorer 7.
If your organization or company uses an update server such as WSUS (Windows Server Update Services) or SMS (Systems Management Server), to prevent and block the deployment and installation of IE7 to workstations, simply declines to release the update will prevent unwanted changes.
If all your users login as an user account without local administrator privileges, then Automatic Updates will not be offered to these users too. Besides, non-administrative users also cannot manually download and install IE7.
Before installation of IE7, Microsoft checks the DoNotAllowIE70 DWORD registry key entry in the following registry branch:
If the key is present, IE7 will be offered as optional downloads only, and not as a high priority update which will required your action. To prevent and block the download and install of IE7, simply modify the value of DoNotAllowIE70 to 1. If the key is not present, create a new DWORD key DoNotAllowIE70 with value as 1. However, the user can still manually download and install IE7.
Microsoft offers Internet Explorer 7 Blocker Toolkit which is used to to automate the process to disable automatic delivery of Internet Explorer 7 above, and contains 2 components of an executable blocker script and a Group Policy Administrative Template (.ADM file). The IE70Blocker.cmd script which creates or removes the registry key on the local or remote computer in the workgroup (if manipulation of registry entries is not blocked on computers within the workgroup). The /B switch will add the registry key to block the automatic update, while the /U switch reverts this status. For downloads and detailed instructions on how to use the script and Group Policy template, visit IE7 Blocker Toolkit download page.
If you don’t like to mess with and modify the registry yourself, and found that the tools provided by Microsoft is hard to use, there are also third-party utilities from IntelliAdmin that let you enable or disable automatic install of IE7 with just a click of button with nice graphical user interface.
IntelliAdmin IE 7 Remote Blocking Tool. The first of two utilites means for changing the registry setting on remote machines or computers.
Download: IE7RemoteBlockingTool.exe (no longer available)
IntelliAdmin IE 7 Blocking Tool. The second tool from IntelliAdmin to update the registry setting on automatic installation of IE7 on local computer system only.
Download: IE7BlockingTool.exe (no longer available)
As the last line of defense, even if you forget to block the Automatic Updates of IE7 or accidentally download IE7, all users can still decline the installation of IE7 when is notified by the Internet Explorer 7 Welcome screen. To decline the upgrade, just press “Don’t Install”.
LK is a technology writer for Tech Journey with background of system and network administrator. He has be documenting his experiences in digital and technology world for over 15 years.Connect with LK through Tech Journey on Facebook, Twitter or Google+.
