Hello, wanted to confirm the approach for migrating from IE7 to IE9 while changing the management of the browser settings at the same time. We are currently running Vista SP2 with IE7 managed via IEAK (INS). We plan to migrate away from IEAK to GPO as part of our IE9 upgrade. Our current plan is as follows, hopefully someone can advise if this is the right approach and/or if there are any gotchas along the way.
Create a GPO with WMI filter for IE version so that it will only apply to IE 9 machines
Apply GPO to OU with IE7 machines (should not apply because of filter)
Deploy IE9 via WSUS or standalone package (this is still a pending decision)
GPO should kick in once IE9 is installed
This seems to work ok so far in limited testing, but is this the right approach? Also, is there an advantage to the standalone package if we can do any manual removal of the INS settings that are currently in place? Our thought process is we shouldnt need to do it since the IE9 GPO, once applied, should force the change of the PAC file (and hence the INS processing). We've seen success with this for the most part, but have a fairly large deployment and want to make absolutely sure we dont leave machines in any sort of unprotected state (from the IE settings perspective).
Any feedback is certainly appreciated.
Thanks!
Rick