Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

When I try to deploy IE8 group policy to users that already have IE8 installed the group policy object uninstalls and then re-installs IE8.

Is there anyway to prevent this?

share|improve this question
up vote 2 down vote accepted

In order to prevent your IE8 policy operating on computers that already have IE8, you need some way of scoping your policy so that such a population is outside of the scope of your policy.

You can do this by

  • Scoping the policy to a group which you are adding only objects without IE8
  • Use a WMI filter in the policy which checks for an entry that only IE8 machines have, if the item exists fail the policy


share|improve this answer
thx I created a WMI filter that only installs IE8 if the user does not have IE8 or greater. – Ishmael Oct 5 '10 at 16:22

Its kinda an Achilles heel of doing GPO installs in my experience. The GPO looks to see if it installed the program yet or not, it doesn't care if the program is installed already. Its kinda a feature really since it lets you control exactly what application and version is installed.

Depending on how you handle things deploying IE8 through WSUS may work better since then Windows updates checks and compares the available downloads and only downloads what it needs.

share|improve this answer
Agreed on WSUS. It handles all Microsoft updates like a champ, including the browsers. – Mitch Sep 14 '10 at 16:29
You can't use the IEAK IE8 with WSUS. – Ishmael Sep 22 '10 at 20:27
Maybe not, but the original question never said IEAK was involved. – Shial Sep 22 '10 at 21:03
How else are you installing customized MSI's for IE8? That is the only way I know. If you are not customizing, why try to even use IEAK? Let WU handle the updates. – ajstein Oct 19 '10 at 6:59
@alharaka: Group policy object distribution. Hence the "grouppolicy" tag. If that's the only way you know you haven't distributed applications for Windows for a long time. – Ishmael Nov 2 '10 at 14:47

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.