Microsoft to Push Out IE 7 This Month

[CyberNerd]

http://blog.washingtonpost.com/securityfix/2006/10/microsoft_to_push_out_internet.html

 

Microsoft to Push Out IE 7 This Month

 

Microsoft this month will be pushing out Internet Explorer 7 to Windows users who download security updates through Microsoft Update or Automatic Updates.

 

Last week, Security Fix mentioned that Microsoft intends to ship 11 patches tomorrow, including a "high-priority update." According to a post on the company's IE blog, that high-priority update could be IE7, a long overdue upgrade to IE 6 that includes new security features and other enhancements that most other Web browsers have long possessed. A Microsoft spokesperson declined to say whether IE7 would be released tomorrow, saying only that it would be released sometime this month.

 

IE 7 includes tabbed browsing, built in RSS feeds, as well as tools to help users spot phishing Web sites that mimic banks and trusted e-commerce companies to steal personal and financial data. The new IE also shores up some weaknesses in ActiveX, a feature designed to help Web sites load interactive content (ActiveX has been abused with such abandon by spyware purveyors to install their junk programs that some security researchers have taken to calling it "HacktiveX").

 

However, one of IE 7's most useful security features, a protected mode -- billed as a "containment wall" to prevent the browser from installing software or changing computer settings without the user's consent -- will not be available for XP users. That feature will be reserved for users who upgrade to Windows Vista, the next version of the operating system, due in January.

 

It will be interesting to see whether this upgrade for Windows will further increase Microsoft's market share in the ongoing browser wars. According to numbers released today by Amsterdam-based Web analytics firm OneStat.com, the total global usage share of IE increased 2.8 percent since July 2006, bringing Microsoft's share of the browser market worldwide to nearly 86 percent. The company says Mozilla Firefox's browsers have a total global usage share of 11.49 percent, a decrease of 1.44 percent since July 2006. In the United States, the IE/Firefox ratio is roughly 80 percent to 15 percent, according to OneStat.

 

Update, 1:14 p.m. ET: The above post was changed to say IE7 would be released this month. Microsoft declined to confirm whether it would release IE tomorrow as part of its patch process, only to say that it planned the release sometime this month.

[Geoff]

Is there a way of preventing it from being auto installed via windows update (perhaps with a registry key like SP2 was)?

[CyberNerd]

http://www.microsoft.com/technet/updatemanagement/windowsupdate/ie7announcement.mspx

 

Automatic Updates Delivery Process

 

The automatic delivery process will notify users an update is available and allow users to choose whether to install Internet Explorer 7. The process is described below and screenshots are included at the bottom of this page.

 

Automatic Updates will only offer Internet Explorer 7 to users with local administrator accounts. Automatic Updates will notify all such users (including those with Automatic Updates configured to automatically download and install updates) when Internet Explorer 7 has been downloaded and is ready to install. The notification and installation process will not start unless and until a user who is a local administrator logs on to the machine. Users who are not local administrators will not be prompted to install the update and will thus continue using Internet Explorer 6.

 

After clicking on the Automatic Updates notification balloon, users will see a welcome screen summarizing key features of Internet Explorer 7 and presenting three options - Install, Don’t Install, and Ask Me Later.

•

 

If a user selects “Install”: The installation process will commence and require Windows Genuine Advantage validation and a re-boot to complete. Installation of Internet Explorer 7 will not override a user’s default browser choice and will transfer the user’s previous homepage, favorites, search settings and compatible toolbars. When the user launches Internet Explorer 7, a first-run experience will be offered highlighting new features and changes.

•

 

If a user selects “Don’t Install”: The notification process will not re-prompt the user to install at a later time; however, any user who is a local administrator will be able to install Internet Explorer 7 at any time as an optional update from the Windows Update and Microsoft Update sites or from the Microsoft Download Center.

•

 

If a user selects “Ask Me Later”: The install process will not proceed and Automatic Updates will start notifying the user that an update is available using the same process (notification balloon and welcome screen) within approximately 24 hours.

 

Internet Explorer 7 will replace Internet Explorer 6 on a user’s machine. However, users will be able to roll back to Internet Explorer 6 by uninstalling Internet Explorer 7 via the Windows Control Panel Add/Remove Programs utility.

[tosca925]

Does any one know how this will be done if we use WSUS?

[GrumbleDook]

In WSUS you should turn off automatic approval of *all* updates (including security updates, critical updates and service packs) and then wait until it arrives. Decline it in your default group and then enable automatic approval of updates again.

 

This should stop it being rolled out if your machines *always* pick up updates from WSUS.

 

However, this does not stop users with laptops who download stuff at home too ... this is my problem now.

[tosca925]

So your not planning on deploying it yet Tony?

[GrumbleDook]

You have to be kidding ... we haven't seen half the damage it can do yet, and there are no adm updates for it yet either to enable /disable tabs or other settings.

 

With over 200 student laptops it would be a little foolhardy to let them have it now. It will be a phased roll out ... a few key classrooms first (we have groups in WSUS to allow for this ... we just never bother to use them).

[john]

Excellent, if it arrives YAY, my days of 2 screens full of IE windows are at an end! just one window with 70 tabs in it! YAY!!

 

It cannot come soon enough! Just need the ADMs now and then were done. As for us it will be too late as all my WSUS boxes are set to "let em rip" as im generally too lazy to manually aprove updates etc, touch wood I haven't been bitten yet, but what the heck, it could be fun on Wednesday when they have all installed etc. It will be whats this new fangled thingy you have installed etc... Using my tealeaves I predict lots of confused staff and children :D Fun Fun Fun

[tosca925]

I'll disable all updates then till after Wednesday and then enable after it has come down and i decline it.

[john]

Just done some checking, its not due tomorrow, as there is one more Official MS webcast on it on the 12th, which is the Last webcase before deployment to MS Update / Downloads, so I would assume its not due tomorrow from that.

[StewartKnight]

does anyone know if they've re-enabled FTP from ie7, I've avoided updating, because if I can't FTP my webpages then it's useless!

[john]

I never noticed it was broken, is it not just one of those options thats tucked away in the properties thats making it break?

[Ric_]

From my testing, IE7 doesn't like all websites still. I know I can't log into my Smile Internet Banking with it... it just does nothing when I try!

 

IE7 is also more resource hungry than IE6 (which is too hungry for my liking). This release will make me get my ass in gear and set up Firefox Corporate.

[Geoff]

No sign of the IE7 update here yet. I guess it'll be later today? I've never really paid attention to the exact time updates hit my WSUS server.

 

This release will make me get my ass in gear and set up Firefox Corporate

 

Shout if you get stuck. I guess I should post my ADM files for the extensions I use.

[Michael]

If you're using WSUS I thought you had to enable the IE7 Dynamic installer which is available in Options > Synchronisation Options > click the 'Change' button under 'Products' and it should be in there somewhere.

 

I agree with the above - although the majority of websites should be ok, I think MS deploying it as an Automatic Update is a bad idea. Giving developers/website owners weeks to make changes to their websites is unacceptable.

Some businesses could lose out if they don't test for IE7 compatibility in time as it will be deployed everywhere. I think IE7 should be optional for the time being and maybe months down the line (whenever Vista is released) IE7 should then be deployed to XP users.

 

IE7 and FF2 would then be the new standard for surfing the web giving developers time to make the necessary changes.

 

Out of curiosity, does IE7 support 256bit encryption for SSL sites or is it still 128bit?

[CyberNerd]

Out of curiosity, does IE7 support 256bit encryption for SSL sites or is it still 128bit

probably only with vista - they need to leave some reasons for ppl to pay for upgrades

 

anyway seems RC1 is still listed on ms website - maybe later this month.....

[mullet_man]

According to the IE Team blog, IE7 via auto updates will not arrive till a few weeks after its available for general download.

 

Extract from blog below

 

IE7 Is Coming This Month...Are you Ready?

07 October 2006, 01:40:00 | ieblog

The final release of IE7 is fast approaching … and I mean really fast … and will be delivered to customers via Automatic Updates a few weeks after it’s available for download. We want to ensure that you are ready and the information below will help get you there.

 

Compatibility with sites, extensions and applications has been a very high priority for us as we develop new features, enhance the existing features and move the platform forward to be more secure and standards compliant. We are continually listening to feedback from our customers, partners and leaders in the industry to resolve major compatibility issues to ensure our common customers have a great experience with IE7. As we make key improvements in areas such as layout and security, some changes need to be made by site owners to work smoothly with IE7. We have produced detailed documentation, tools and other resources to assist site, extension and application owners in their testing and development efforts to ensure they are compatible with IE7. We have also proactively worked with hundreds of companies to resolve issues that were reported through our beta testing to ensure those issues were resolved before IE7 is released.

 

These efforts have been ongoing since last year and have been extremely successful but we can’t ensure 100% compatibility without your help. We need you to test and ensure your sites, extensions, and applications are ready for IE7. We strongly encourage you to do the following ASAP:

 

Download, install and test your products with IE7 RC 1 –This is the fastest and best way to test for compatibility issues.

 

Download the IE7 Readiness Toolkit - This toolkit pulls together a number of important resources to help you prepare for IE7:

 

Developer and IT Pro readiness check lists,

Detailed documentation on important changes in IE7,

Testing and debugging guidance,

Tools for testing, debugging and investigating issues,

And more…

 

Download and use the Application Compatibility Toolkit – Helps test browser-based applications to ensure they work with IE7.

 

Visit the Microsoft Internet Explorer Developer Center – You will find an array of important information for developers.

 

Use the Information Index for Internet Explorer7 – Think of this as a table of contents linking you to documentation, blog posts, whitepapers and other information on IE7.

 

Read the IE Team Blog – Use the search feature on the right to find previous posts on almost any topic you can think of with regard to IE7.

 

A AU download blocker can be downloaded from here

 

http://www.microsoft.com/technet/updatemanagement/windowsupdate/ie7announcement.mspx

 

Its a bit further down the page. It can be ran via group policy and a script.

 

Hope this helps!!

 

Stephen.

[Geoff]

A AU download blocker can be downloaded from here

 

http://www.microsoft.com/tech...ement.mspx

 

Its a bit further down the page. It can be ran via group policy and a script.

 

Exactly what I was after, thanks.

[Simcfc73]

Another **** up by myself this week relating to this.

 

I decided to have a play with RC1, it seems to load quicker (except when it waits for the Phishing Filter and I like the browsing experience.

 

Unfortunatley with my experimenting I have got some problems which I am sure no one else will have but heres a warning.

 

I used IEAK 7 to make a nice EXE. I just decided to run it on a few machines in a room. All seemes well and after a couple of reboots it worked fine.

 

Then I copied the ADM from the workstation to a Group Policy object and had a play with the settings. Unfortunately I accidentally linked it to the school machines and its messed up loads of settings.

 

Inclusing.

 

Right click does not work on the webpages.

Trying to open a link on the intranet in a new windows brings up a security warning saying its blocked. It seemed to affect access for some reason too, and it gave access denied on the redirected start menu.

Properties is now locked out for everyone on these machines including me.

 

Disabling the OU does not work, removing IE7 does not fix it. I went through all the Group Policy and disabled everything and doubel checked everything and its still knackered.

 

It seemes that the settings for the Intranet problem got messed up in the profiles so I had to redo those, not a biggie.

 

The locked out is still messed up and the problem is still here. My machines that I initally installed onto without using the IEAK exe is working fine.

 

I know I was stupid so please don't call me one, just moaning out loud.

 

Thanks for listening

[Michael]

Just for everyone's reference, if you install WSUS on your domain, not only can you distribute critical updates to your workstations, but you can also determine whether IE7 is deployed. This means you don't have to modify the registry to prevent IE7 installing automatically.

 

I'm just thinking down the line when IE7 has been around a while, you'll have to undo the registry changes you're putting in place now.

 

Also a few of you have mentioned about IE7's ADM files. Surely these will be distributed within the final IE7 package? If not I am presuming like IE5 and IE6 they can use the same policies and ignore policies not applicable to the version you're using.