How to deploy Internet Explorer 11 using SCCM 2012 R2

95830

Deploy Internet Explorer 11 using SCCM 2012 R2 In this post we will see how to deploy internet explorer 11 using SCCM 2012 R2. Internet Explorer is installed when you install the windows operating system and is the default browser for any windows OS. Today most of the companies use Windows 7 as the OS and IE 10 as the browser, with the release of Internet Explorer 11, the companies might be looking to upgrade their browser version from IE10 to IE11. The internet Explorer 11 offers better features than IE10 and is more faster and smoother when compared to IE10. Note that the Internet Explorer 11 is available for a number of systems and languages. Internet Explorer 11 is pre-installed on Windows 8.1 and Windows Server 2012 R2. There are multiple ways on deploying internet explorer 11 and they are listed below.

System Center R2 2012 Configuration Manager – Deploy and install Internet Explorer 11 on your user’s computers through a software distribution package.

Windows Server Update Services (WSUS) – Download a single copy of the Internet Explorer 11 updates, caching them to local servers so your users’ computers can receive the updates directly from the WSUS servers, instead of through Windows Update.

Group Policy Software Installation – Deploy and install Internet Explorer 11 on your user’s computers through a combination of Group Policy and Active Directory.

Microsoft Deployment Toolkit (MDT) – Add the Internet Explorer 11 update to your deployment share, using MDT to update your previously-deployed Windows image.

In this post we will see the steps to deploy the IE11 using SCCM 2012 R2 on a Windows 7 computer. We will download the Internet Explorer Administration Kit 11 first. Internet Explorer Administration Kit 11 (IEAK 11) simplifies the creation, deployment, and management of customized Internet Explorer 11 packages. It can be used to configure the out-of-box Internet Explorer 11 experience, and to manage user settings after deployment.

 

How to deploy internet explorer 11 using SCCM 2012 R2

 

When you install Internet Explorer 11 for Windows 7, the installer program tries to automatically install some prerequisite components. If this part of the installation fails, Internet Explorer stops the installation process.We will download the prerequisites first and then install IEAK 11. To download the IE 11 prerequisites click here.

The prerequisites are available for both 32 bit and 64 bit OS, download the appropriate files depending on whether you are running a 32-bit or 64-bit edition of the operating system. Download the files and extract each update to a folder using 7zip.

How to deploy internet explorer 11 using SCCM 2012 R2

 

The below screenshot shows the updates extracted to each folder.

How to deploy internet explorer 11 using SCCM 2012 R2

 

Install the Internet Explorer Administration Kit 11 on SCCM server or any computer you want. The below listed screenshots shows the installation of IEAK 11, you can skip these if you are familiar with the installation. Click Next.

How to deploy internet explorer 11 using SCCM 2012 R2

Choose Internal Distribution via a Corporate Intranet. Click Next.

How to deploy internet explorer 11 using SCCM 2012 R2

Complete the installation and click Finish.

How to deploy internet explorer 11 using SCCM 2012 R2

Now the IEAK 11 customization wizard pops up, this wizard will help you to customize, deploy and manage IE. Click Next.

How to deploy internet explorer 11 using SCCM 2012 R2

Choose the location where you want to store the package. Click Next.

How to deploy internet explorer 11 using SCCM 2012 R2

 

Choose the Target Platform and click Next.

How to deploy internet explorer 11 using SCCM 2012 R2

Choose the Target Language and click Next.

How to deploy internet explorer 11 using SCCM 2012 R2

 Package Type Selection – Click Full Installation Package. Click Next.

How to deploy internet explorer 11 using SCCM 2012 R2

You can choose all the features and customize them as per your requirement. Select the IE11 features that you wish to customize and click Next.

How to deploy internet explorer 11 using SCCM 2012 R2

Click on Synchronize.

How to deploy internet explorer 11 using SCCM 2012 R2

Now we know that IE11 requires certain prerequisites which we have download already. Let’s add them to custom components. Click on Add.

How to deploy internet explorer 11 using SCCM 2012 R2

For every KB update go to the individual update folder and select the cabinet file.

How to deploy internet explorer 11 using SCCM 2012 R2

Provide the name for that component (provide KB number as its easy to identify the update), choose Install before Internet Explorer (we want the updates to be installed before IE11 is installed) and click Add.

How to deploy internet explorer 11 using SCCM 2012 R2

When you have added all the components, it should resemble the below screenshot. Click Next.

How to deploy internet explorer 11 using SCCM 2012 R2

User ExperienceChoose Completely Silent Installation and No restart. Click Next and complete the wizard.

How to deploy internet explorer 11 using SCCM 2012 R2

When you open the destination folder you will see the IE11 package. One of them is an app and other one is windows installer package (.msi).

How to deploy internet explorer 11 using SCCM 2012 R2

In the above step we have got the .msi file,  we will now create an application and choose the IE11 msi file and click Next.

How to deploy internet explorer 11 using SCCM 2012 R2

Click Next. Deploy the app to the device collection.

How to deploy internet explorer 11 using SCCM 2012 R2

Now on the client computer we see that the app is available. Click on Install.

How to deploy internet explorer 11 using SCCM 2012 R2

Wait for some time while the installation is completed. Check the AppEnforce.log file on client computer for troubleshooting. We see that the IE11 is installed successfully. Though we had suppressed the reboot during the creation of package, I would recommend to reboot the client computer once.

How to deploy internet explorer 11 using SCCM 2012 R2

  • arshad

    Hi Prajwal,

    First I will thank you for above Post.

    I would like to Clarify that I am using also SCCM 2012 R2 & I Done all your steps But when reached to custom components add from KB2523623 to KB2670838 , on Option install on success as Yes (But your case no) & package created was Successful.

    after application deployment wizard on my case I am not to find contents files steps (from KB2523623 to KB2670838) as You marked on RED. it simply take product code & package create application wizard was completed.

    the package I done for win7 64 bit system & steps I created on windows 8.1 system. As a Test then I try to deploy on server 2088 R2 SP1 (with IE 8 & IE 10)

    installed form the software center & appenforce.log also fine. display as

    ++++++ App enforcement completed (91 seconds) for App DT “Internet Explorer 11 – Windows Installer (*.msi file)” [ScopeId_08B41ED9-5CA8-423A-88F2-71B266DE1C3D/DeploymentType_b5f1560c-9309-46aa-9cea-1b2411fabcb2], Revision: 1, User SID: ] ++++++

    But I restarted the server I am not able to find IE 11 or updated & Server IE status with IE 10
    Kindly let me know that
    (1) Where I am wrong…
    (2) for server 2008 R2 same package of win 7 64 bit sp1….? if no then I am not able to find on IE tool kit option for windows server 2008 R2 SP1

    only I find win7 & windows 8 (64 Bit & 32 Bit)

    Best Regards,
    Arshad

    • Arshad Husain

      HI Prajwal,
      Thanks for the Post, Anyhow on some systems I am able to install IE 11 by your Method.
      Best Regards,
      Arshad

  • Arovbukay

    Can you use the MSI file for SCCM2007 deployment? Do you have to copy the msu files into the same directory as the MSI?

  • Arovbukay

    Hi Prajwal,

    Does this work with SCCM 2007? I’ve followed your steps but it seems the IEAK doesnt actually do anything. Will give it another go just to be sure, but please let me know.

    Thanks

    • @Arovbukay – I have tested this on SCCM 2007, can you give a try again ?

      • Arovbukay

        I have retested, Once i’ve created the EXE with IEAK, I then tried uninstalling IE11 from my test machine (along with any pre req patches). I then rebooted the machine and tried installing using IE11-Setup-Full.msi but when I check the IE-main.log file, it shows it is still trying to download 2 of the patches (KB2834140 and KB2670838)

        I also tried copying these files it downloads (from c:windowstemp*ietempfolder*) and using these with the IEAK but the same happens, it tried to re-download.

        I must be missing a step. Please advise.

        • KB2834140 and KB2670838 are the updates required before you install IE11, are you sure you have included them in the IE package ?. I believe the updates should be set to install before IE 11 installs and not after IE11 is installed.

  • guest

    How are you making SCCM pull the update files when they are not in the same source folder as the MSI. Did you just create an IE11 folder and dump all the relevant files in there?

  • Guest

    Where can you download the cab files for the updates? The Microsoft article you linked to only has the msu files and I can’t seem to add those to the Custom Components (only exe’s or cabs).

    • If you have download the updates, extract it using 7zip software to a folder. In this folder you will find the cab files.

      • Vithoba Patkar

        HI Prajwal,

        Internet Explorer 11 is not installing on machine even though the AppEnforce log shows it as successful.

        +++ MSI application not discovered [MSI Product Code: {482F95F4-0928-406C-9E1B-941EA10E6805}, MSI Product version: ] AppEnforce 11/21/2015 2:33:43 PM 6512 (0x1970)

        App enforcement environment:

        Context: Machine

        Command line: msiexec /i “IE11-Setup-Full.msi” /q

        Allow user interaction: No

        UI mode: 0

        User token: null

        Session Id: 2

        Content path: C:CCMCachey

        Working directory: AppEnforce 11/21/2015 2:33:43 PM 6512 (0x1970)

        Prepared working directory: C:CCMCachey AppEnforce 11/21/2015 2:33:43 PM 6512 (0x1970)

        Found executable file msiexec with complete path C:Windowssystem32msiexec.exe AppEnforce 11/21/2015 2:33:43 PM 6512 (0x1970)

        Prepared command line: “C:Windowssystem32msiexec.exe” /i “IE11-Setup-Full.msi” /q /qn AppEnforce 11/21/2015 2:33:43 PM 6512 (0x1970)

        Valid MSI Package path = C:CCMCacheyIE11-Setup-Full.msi AppEnforce 11/21/2015 2:33:43 PM 6512 (0x1970)

        Advertising MSI package [C:CCMCacheyIE11-Setup-Full.msi] to the system. AppEnforce 11/21/2015 2:33:43 PM 6512 (0x1970)

        Executing Command line: “C:Windowssystem32msiexec.exe” /i “IE11-Setup-Full.msi” /q /qn with user context AppEnforce 11/21/2015 2:33:45 PM 6512 (0x1970)

        Working directory C:CCMCachey AppEnforce 11/21/2015 2:33:45 PM 6512 (0x1970)

        Post install behavior is BasedOnExitCode AppEnforce 11/21/2015 2:33:45 PM 6512 (0x1970)

        Waiting for process 15976 to finish. Timeout = 120 minutes. AppEnforce 11/21/2015 2:33:45 PM 6512 (0x1970)

        Process 15976 terminated with exitcode: 0 AppEnforce 11/21/2015 2:33:59 PM 6512 (0x1970)

        Looking for exit code 0 in exit codes table… AppEnforce 11/21/2015 2:33:59 PM 6512 (0x1970)

        Matched exit code 0 to a Success entry in exit codes table. AppEnforce 11/21/2015 2:33:59 PM 6512 (0x1970)

        Performing detection of app deployment type Internet Explorer 11 – Windows Installer (*.msi file)(ScopeId_D8F7BC6D-6979-404A-ABB8-6D6AFAC08F20/DeploymentType_54c350c1-5383-45c2-bde7-2c0b37afeadc, revision 1) for system. AppEnforce 11/21/2015 2:33:59 PM 6512 (0x1970)

        +++ Discovered MSI application [AppDT Id: ScopeId_D8F7BC6D-6979-404A-ABB8-6D6AFAC08F20/DeploymentType_54c350c1-5383-45c2-bde7-2c0b37afeadc, Revision: 1, MSI Product code: {482F95F4-0928-406C-9E1B-941EA10E6805}, MSI Product version: ] AppEnforce 11/21/2015 2:33:59 PM 6512 (0x1970)

        ++++++ App enforcement completed (15 seconds) for App DT “Internet Explorer 11 – Windows Installer (*.msi file)” [ScopeId_D8F7BC6D-6979-404A-ABB8-6D6AFAC08F20/DeploymentType_54c350c1-5383-45c2-bde7-2c0b37afeadc], Revision: 1, User SID: ] ++++++ AppEnforce

  • Hi it works when you have IE10 and when you want to upgrade to IE11. I have got many comments from users where they were not able to upgrade from IE8 to IE11. So i am sure my post works well when you upgrade IE10 to 11. Regarding the internet connectivity, I guess its not required as you have updates added to the package already.

  • Steve Buffenstein

    Great post!!! Worked like a champ to upgrade over 500 of our Win 7 machines running IE10 (some on IE 9 as well). Keep up the great work Prajwal!

  • Manuel Pinto

    Hi Prajwal,
    I did it as you discribe but in my case it didn’t upgrade it. I’m using sccm 2012 and i’m trying to upgrade from ie9 into ie11.
    When i look into the logs it says it installed with success.
    Do you know if it works for my case?
    Thanks in advance.
    Regards,

    • Yes it should work. If the log file says it installed with success then it should have upgraded the browser. Did you try restarting the machine ?

      • Manuel Pinto

        Yes, several times 🙁
        It is very strange…

        • Take a look on IEmain.log (c:windows) to show if there are errors

  • Hi Paul, if the updates (prerequisites) are available in the package it should not connect to internet to download the same.

    “As a result of this the IE11 install aborts” – Why does the installation stops ?. Have you checked the log files. Yes you can redeploy the package but can you check AppEnforce.log & see what’s happening ?

  • check the IEmain.log file OR on one of the machines log in and check the IE version.

  • On the machines where IE old version is seen, try restarting the machine.

  • bdam

    Prajwal,
    I too am having difficulties getting the prerequisites to install properly when moving from IE 9 and am seeing download errors in the log. The instructions tell us to use the CAB files which, according to the IEAK documentation, https://technet.microsoft.com/en-us/library/dn454905.aspx requires a command but I don’t see one in the instructions or screenshots.

    In the ‘Create Application Wizard’ the file list you highlighted in red shows MSU files rather than the CABs. So I’m just a bit confused on that part … where are those coming from if we are using CAB files in the IEAK and not adding them manually in SCCM?

  • Kamalani DeFreitas

    Hi Prajwal,

    Thank you for the post. It works great. I am using SCCM 2012 R2 and I am mostly using this to install IE11 during our OSD…I find that it is installing just like it should be. The problem I have run into is when I log onto the computer with a user account that doesn’t have admin privilege they are presented with “The User Profile Service service failde the logon. User profile coannot be loaded.” I have found the only way to allow a non-admin user to log onto the computer is to go into the Properties > Advanced Security Settings >Change Permissions > and then make sure that the box is checked for the “Replace all child object permissions with inheritable permissions from this object” of the Default user.

    Have you ran into this issue?

    There has got to be a better way to being able to deploy IE 11 over SCCM or some kind of fix. Any input would be helpful.

    Thank you

  • Chui Foong Liew

    I have the same problem

    • I used 7zip while extracting the files. Could you try using 7zip once ?

  • Mark

    So could someone tell me if I have this correct…?

    I can’t deploy KB2841134 to all the Windows 7 computers in my SCCM 2012 R2 environment because it has expired. A process that would take just several quick moments. But I have to go through this entire process of downloading an admin tool and creating custom packages just to do something as simple as install IE 11? Sounds ridicules.

  • Waiting for process 484 to finish. Timeout = 120 minutes. AppEnforce 6/11/2015 11:24:16 AM 2392 (0x0958)
    Process 484 terminated with exitcode: 0 AppEnforce 6/11/2015 11:28:58 AM 2392 (0x0958)
    Looking for exit code 0 in exit codes table… AppEnforce 6/11/2015 11:28:58 AM 2392 (0x0958)
    Matched exit code 0 to a Success entry in exit codes table. AppEnforce 6/11/2015 11:28:58 AM 2392 (0x0958)
    Performing detection of app deployment type Internet Explorer 11 – Windows Installer (*.msi

    Yes from the log file I see that the IE Is installed without any errors. Strange !

  • Did you check Appenforce.log file ?.

    • Liam Woollery

      Yes I have checked the logs they just show the msi command for IE11 running there are no errors. However the updates have not installed. I moved across the msu files when the pacjkage was created. I may try to re-packge it on another evice to see if this is the problem.

      • Liam Woollery

        On a fresh machine I created a script to install updates rebooted it. Ran msi created by ieak then rebooted ie11 installed. It looks like the updates are not importing when the ieak is running nany ideas
        Thanks

  • Did you check the status of IE installation in Appenforce.log file ?

  • @Codename_Falcon – Thanks for notifying, I will update the post.

    • @Codename_Falcon – Nope, the IE11 msi file can be on a different folder. The .msu files are required while creating the IE11 package, once they are packaged the msi file can exist anywhere.

  • Subin Nk

    I am also having the same issue In console showing as IE 11 got installed but still system is runing in IE 9

  • Jared Wetmore

    1st, awesome post ! this is exactly what I need for my deployment of IE11.

    Issue is when I add all the pre-req files, they don’t show up on the create application wizard file like yours.
    I am extracting the files with 7 zip, I choose the .CAB file in the IEAK11 selection.
    I only have 2 files shown , where you have all the .cab files that are selected in the pre-req installs.
    any suggestions for me ? thanks again !

  • Gian Franco Scappini

    Dear Prajwal Desai ;
    for your help to complete all the steps my problem arises when creating the application, because I only row contents appears as ” IE11 – Setup- full.msi and no aggregates prerequisites , and when the deployment teams throw errors when downloading the prerequisites because our comapñia have proxy , and when installing the system account , it is not valid to seek out the prerequisites to the Internet, we have computers with Windows7 64x with IE8 current browser . Thanks

  • The_Extremist_303_909

    Hello, I am using this guide to upgrade from IE10 to IE11. Now, it works fine on 2 of my test machines, but on the other 2 it shows as Installed in Software Centre,checking AppEnforce,AppDiscovery,CAS.log shows no errors.

    Install command is: msiexec /i “IE11-Setup-Full.msi” /q
    When I check the detection rule, the value {BE43D9F2-236F-4322-A482-EFAB8FFE4210} is already in the test machine registry.

    So, what is the issue here? Checked Event Viewer also. I can verify that IE10 is installed, and IE11 is not. This will be rolled out to 500 machines approx.Your help is appreciated.

    • Hi, I have been noticing similar issues raised by most of the users. The IE11 upgrade is working on few machines and failing on rest. I will soon create another post on deploying IE11 using another method.

      • The_Extremist_303_909

        that would be great. hitting my head against the wall now!

      • Abdullah.M.M

        hi,

        i tired but not working and not showing in the software center please any-update for the new method for deploying IE10 or IE11

        or any new sloving the problem in software center ?

        • “not showing in the software center” – Have you distributed the app to DP ?. Boundaries and boundary groups in place ?. DP associated with boundary group ?

      • The_Extremist_303_909

        Hi Prajwal. Have you had a chance to look at this? I will be upgrading very shortly be great to sort this out!Thanks

      • The_Extremist_303_909

        Hi Prajwal, Have you managed to look at this. I will be upgrading IE11 very shortly! Thanks

  • Bill

    I know this is a year old post but I am using your methid and it worked but I did not get the user experience screen did I miss something ?

  • Bill

    Hi Prajwal,
    I have used this process and it works but I have a few clients that IE 11 will not install on but it still shows them as compliant. I have a ticket open with Microsoft and all they keep doing is sending me to various sites very frustrating. Any ideas that might help me I am using SCCM 2012 R1.

    What I have noticed on one of my test boxes is that sccm says installed but nothing but when I go into the registry I see entries for IE 11 very odd

  • daemon616

    Where does IE11-Windows6.1-x64-en.us.exe come from? I followed your instructions to a T but I don’t have this file and I noticed it in your screenshot when you created your application.

  • Thank you so much.

  • Hi, good post. Was just wondering why there are 32 items being added to the Application. Surely it should just be the MSI itself? I am assuming once it is installed and rebooted IE11 should be installed.

    As at the moment, I am not getting that. The Appenforce.log saying it detected the MSI and the exit code was 0

  • Yaser Hussaini

    Hello , Prajwal

    The prerequisites for ie11 that you have added do not show, like they do in the in your case.Why is that.?

  • Mark del Rosario

    Hi Prajwal, just wondering, what if the prerequisite is already installed. Basically, the installation of the prerequisite included with the IE package will not push through anymore. Will the installation of IE stop or will still push through? Would the IE package be able to know that the prerequisite is existing and can continue with the installation?

    • If the pre-req is installed, then it won’t be installed again by IE package.