I deployed recently an update for IE6 to IE7 and learned the hard way that some webtools that we're using aren't compatible. Is there a server-side way to do a mass uninstall of IE7 and its updates?
I am using Windows 2008 on the DC.
Well according to MS running this on the machines affected should uninstall IE 7 and put IE 6 back:
If you did this from WSUS or SUS you could also create a new empty advertisement that just runs the above command. I do suggest trying this out on one of the impacted machines before rolling it out company wide though :-)
The "easiest" way would be to use the same mechanism used to roll out the update. Most central software deployment utilities and patch management servers allow you to roll back updates (this, of course, depends on how much you trust the IE7 uninstaller, but for argument's sake, let's assume that it always works flawlessly).
So, for example, if you updated your systems using WSUS, then you could simply roll back all of the updates from the WSUS server. If, however, you updated IE7 directly on each machine (e.g. through Windows Update), then you could write a short script (VBScript, AutoIt, Powershell, CMD... pick your poison...) to run the IE7 uninstaller and deploy that script via a Group Policy.
Whichever way that you do it, though, you will need to make sure that your scripts do a few things before attempting the uninstall. I would highly recommend performing the uninstall in safe mode, since the uninstaller for IE does not play well with many antivirus utilities and numerous other pieces of software.
Script 1 (pre-uninstallation, deployed by AD/GP):
Script 2 (uninstallation):
Due to the intrusive nature of this uninstallation, you'll need to schedule this carefully with your users.
And finally, be sure to test the whole procedure a few times, throwing as many "real-world" scenarios as you can think of in your environment that could get in the way of the deployment running as expected.