IE 11 Default Search Provider Resets After Sysprep

[HEADSHOTPUNK]

I don't want to just hide all of the Internet Explorer security updates that are included with that cumulative update each month. As of right now, if I wanted to build an image, I would have to hide 3 months worth of IE 11 updates just to get my default search provider to stick when new user accounts are created. The problem is the 1 update that is breaking it is included with all the other security updates and I don't know how to just single it out.

Also, that setting about not replacing search providers only works after the account is created. The problem is that when the account is created, it auto defaults to Bing because of that update. I'm trying to make it as seamless and easy as possible for users to sign onto a new PC instead of them signing on then having to make a bunch of setting changes.

 

[gregrocker]

You'd single out Updates by uninstalling or restoring before last batch when problem occurs then install them singly to narrow down to problem Update. Uninstall it or Restore and then Hide it.

Then capture an image so you have the OS completely patched to that point.

The question is if the update will be wrapped into future ones, or remain standalone and hidden.

 

[HEADSHOTPUNK]

I know which update it is. It's KB2988414. The problem is that it's included in this update, KB2976627 (and its been included in every IE 11 cumulative security update since then). I can't find a way to just remove the problem update, KB2988414. If I search for it under installed updates it doesn't pull up. Is there a way to just single out that update, instead of the packaged update it was included in?

(I don't know if I'm making sense any more lol)

 

[Kari]

Yes, you are making sense. Uninstalling / disabling / hiding the culprit update is useless because it is included in each cumulative security update since then. Creating an image without the culprit update and all security updates since then only works until user updates IE, making it useless, too.

I have played with this a bit and can confirm your findings. I am toying with an idea of including a run-once script in image, which when image is deployed and a new user signs in first time executes the script changing the default provider to Google.

Still in pen and paper flowchart phase, totally unsure if doable.

 

[trumping]

Guys, I've had the same problem and I've registered on your forum only to say thank you and sahre what we got from a case opened with MS: https://technet.microsoft.com/en-us/library/security/ms14-065.aspx should resolve that issue.

 

[HEADSHOTPUNK]

Thanks for your reply trumping. I've been swamped the last couple of weeks and haven't had a chance to look into this any further. I'm going to build up a new image with this update and try sysprepping it and see what happens. Thanks again for your info, I'll update this with my results.

 

[Compstuff]

WOW how ironic that you were working on this same issue at almost the same time I was in MDL. Google Default Search Scope I basically gave up after I couldn't figure it out but now I ran across your thread and it gives me some hope again!!! Did anyone ever figure this out and get it to work? I am testing this again and can assist if there are any ideas and a direction that I can go in. THANKS

 

[Kari]

Hi Compstuff, welcome to the Seven Forums.

I have player with this to some extent, not been able to find a working fail proof solution. Anyway, good that you bumped this thread, maybe we'll find a solution.

 

[Compstuff]

Nice to be here I just ran across this little tidbit also which I had never seen before https://social.technet.microsoft.co...ovider-via-installins?forum=ieitprocurrentver

 

[Kari]

That pretty much sums it up, confirms the issue.

 

[Compstuff]

Kari I had also delved into some runOnce scripts in my image and even played with some Active Setup attempts but couldn't get it... admittedly I'm not that great at scripting so I had thought part of the problem was my skill set or lack of

 

[Compstuff]

I made a post in https://social.technet.microsoft.co...ovider-via-installins?forum=ieitprocurrentver to ask if there has been any progress on the issue from MS

 

[Compstuff]

OK so here is an answer from MS https://social.technet.microsoft.co...trol-due-to-kb2988414?forum=ieitprocurrentver I haven't had a chance to re-check the IEAK with a new sysprep since I'm pretty busy but I will try soon

 

[cyberdanny]

I had the same issue with my latest sysprepped images, the only thing I did different from my previous image was include IE 11 and associated updates. I was happy after I joined them to our domain because the behavior dissappeared after that. I have a couple of GPOs related to IE as listed below:

Enable "Disable add-on performance notifications"
Enable "Automatically enable newly installed add-ons"
Disable "Turn on Suggested Sites"
Enable "Prevent performance of First Run Customise settings" and select "Go directly to home page"

One of these is likely responsible, probably the last one...sorry I'm to busy to further test so maybe give this a shot if you are still having this issue.

Regards,

Danny