The CMD file has a switch for /B to block and /U to unblock.You can also run this script on remote computers by simply entering IE11_Computer1 /B to block IE11 from being updated on Computer1.There is, though, updates that need a little more scrutiny before being installed in your environment, Internet Explorer is one such update.Come October 18th 2013 Windows 8.1 will release and there is a very good assumption that an update will be available then or soon after for Internet Explorer 11.Automatic updates to Microsoft's Internet Explorer browser may cause interruptions during the work day.For example, updates may require the browser to close and restart, which could potentially cause you to lose work.
More information on Java support is available from the Microsoft website.When the Active X control blocks an older Java version, you'll see: It is recommended you update Java before allowing the app to run. If you don't trust the site or prompt, you can visit the web site to get the latest version.The out-of-date Active X control blocking applies to: In some instances, after installing Java 7 using Internet Explorer, Java apps do not function.Now, every day a new version of IE gets installed... it is usually 11 but sometimes 9 or 10 and I have to uninstall it and go back to IE8. If you aren't controlling your Updates with WSUS or SCCM 2007/2012 (or other means) then there is a very good chance your users will receive this update.Microsoft has been nice enough throughout the years to distribute a tool to block the automatic update installation of a new version of Internet Explorer and this year is no exception. When you run this on a computer you will notice it's a self-extracting executable and will unzip a CMD file to run the tool manually, an ADM template to import into the Group Policy Management Console, and a help file for more detailed information about each piece.Previously I would just hide the updates for IE in Windows update and it was never an issue, but doing that now does not seem to stop the update. I have also made these changes in my registry: Registry Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Setup.0 (and the appropriate values in 9.0 and 10.0) Type: REG_SZ Name: Do Not Allow IE11 Data value: 1 Type: REG_SZ Name: Do Not Offer IE11AU Data value: 1 I have also tried to completely disable the Windows Update service, but that seems to turn itself on daily as well. This script updates the registry at this key HKLM\SOFTWARE\Microsoft\Internet Explorer\Setup.0 with the new DWORD Do Not Allow IE11 and a value of 1 to block or 0 to unblock.Two important things need to be mentioned with this toolkit: 1.