Transcript Windows Internet Explorer 8 in the Enterprise: Build, Deploy

Matt Heller
Aaron Margosis
Microsoft Corporation
CLI 313
Business is moving to Web Based Apps
Customer
Management
Reporting
Workflow
Travel
PC Based
Browser
Based
Research
Purchasing
E-Mail
Personal Use
Increase user productivity with IE8
Accelerators:
7 clicks to map an address becomes 2 or 3
Web Slices:
Users save 10s of seconds on common
tasks
Visual Search:
Search smarter without leaving the page
No other Browser offers all of these service capabilities
Accelerators
Ready Access to Online Services You Use Most
Email
Blog
Shop
Map
Share
Translate
Find
Define
Accelerators
Web Slices
Rich, Real-time Integration of Online Services
Zune
Web Slices
Improved Search
Suggestions
Configure
Quickly
Visual
Search
Specify
Multiple
with
Returns
Search
Results
Search
Images
Provider
from
Providers
History
with Results
Visual Search
Where can I hook into IE?
Internet Explorer 8 &
Outlook Web Access
OWA: Send Mail Accelerator
http://tailspintoys.org/owa/accelerators/NewOwaMail.xml
<?xml version="1.0" encoding="UTF-8" ?>
<os:openServiceDescription
...
<os:activityAction context="link">
<os:execute action="http://www.tailspintoys.org/owa/mailto.php"
method="get">
<os:parameter name="ae" value="Item" type="text" />
<os:parameter name="t" value="IPM.Note" type="text" />
<os:parameter name="a" value="New" type="text" />
<os:parameter name="to" value="{link}" type="text" />
</os:execute>
...
</os:openServiceDescription>
OWA: Send Mail Accelerator
http://tailspintoys.org/owa/mailto.php.src
<?
$ae
$t
$a
$to
=
=
=
=
$_GET[ 'ae' ];
$_GET[ 't' ];
$_GET[ 'a' ];
str_replace("mailto:", "", $_GET['to']);
header("Location: https://windows.mail.microsoft.com”.
“/OWA/?ae=$ae&t=$t&a=$a&to=$to");
?>
Internet Explorer 8 & IIS/SQL
(Web Slice)
IIS/SQL: Web Slice
http://ie8demos.com/northwind/intranet/resport.asp
...
<div class="hslice" id="report-1">
<h2 class="entry-title">Consoto Laptop Stock</h2>
<a rel="entry-content"
href="http://www.ie8demos.com/northwind/intranet/report-slice.asp?id=1"
style="display: none;"></a>
<div class="entry-content">
...
Internet Explorer 8 + Dynamics CRM
Internet Explorer 8 & Dynamics CRM
Dynamics Lead Accelerator
Grab Web
Content
Pass to
handler
Parse
needed
information
Pass to
Dynamics
CRM
Dynamics CRM: Lead Accelerator
http://tailspintoys.org/crm/lead_full.xml
...
<os:activityAction context="selection">
<os:preview method="post"
action="http://www.tailspintoys.org/crm/actions.php">
<os:parameter name="method" value="preview" />
<os:parameter name="mode" value="full" />
<os:parameter name="url" value="{documentUrl}" />
<os:parameter name="title" value="{documentTitle}" />
<os:parameter name="link" value="{link}" />
<os:parameter name="text" value="{selection}" />
</os:preview>
<os:execute method="post"
action="http://www.tailspintoys.org/crm/actions.php">
<os:parameter name="method" value="execute" />
<os:parameter name="mode" value="full" />
<os:parameter name="url" value="{documentUrl}" />
<os:parameter name="title" value="{documentTitle}" />
<os:parameter name="link" value="{link}" />
<os:parameter name="text" value="{selection}" />
</os:execute>
</os:activityAction>
...
Dynamics CRM: Handler
http://tailspintoys.org/crm/actions.php.src
https://tailspintoys.crm.dynamics.com/sfa/leads/edit.aspx?
emailaddress1=$result_email &
telephone1=$result_phone &
address1_line1=$result_street &
address1_city=$result_city &
address1_stateorprovince=$result_state &
address1_postalcode=$result_zip &
address1_country=United%20States &
leadqualitycode=3&
leadsourcecode=8
Dynamics CRM: Handler
http://tailspintoys.org/crm/actions.php.src
$regex_phone =
"/((1\s*[\/\.]?)?(\((\d{3})\)|(\d{3}))\s*[\/\.]?\s*(\d{3})\s*[\/\.]?\s*(\d{4})\s*(([xX]|[eE][xX][tT])\.?\s*(\d+))*)/";
$regex_address =
"/(([0-9]+([a-zA-Z0-9]?[\s]*[a-zA-Z0-9.\-\,\#]+[\s]*[a- zA-Z09.\-\,\#]+)[\s\r\n]*([a-zA-Z0-9\s.\\#]*))[\,\r\n]*([a-zA-Z0-9\s.\\#]*)[\,]{1}([a-zAZ09\s.\-\#]*)[\r\n\s]*([0-9]{5}([\-]{0,1}[09]{4})?))/";
$regex_email =
"/([A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,6})/";
Dynamics CRM: Handler
http://tailspintoys.org/crm/actions.php.src
$method = $_POST[ 'method' ];
$mode
= $_POST[ 'mode'
]; ...
$text
= $_POST[ 'text'
];
$regex_phone = "/((1\s*[-\/\.]?)? ...
$regex_address = "/(([0-9]+([a-zA ...
$regex_email = "/([A-Za-z0-9._%+- ...
extract_email();
extract_phone();
extract_address();
switch($method) {
case METHOD_PREVIEW:
echo("<p align=\"right\" style...
case METHOD_EXECUTE:
header("Location: https://tailspintoys.crm.dynamics.com/sfa/leads...
Deployment Planning
A simple three phase approach
Inventory
Prioritize
Test and
Mitigate
What do
we have?
What do
we need?
How do we
get there?
Top Compatibility Issues
Something “broke” my app….
Rendering Engine/CSS
User Agent String
Conditional Comments
Protected Mode
64-bit Mode
JSON Support
Deprecated Features
Movin’ on up
Upgrading (users and sites) from IE6
Migrating to IE7 and IE8 is more than deploying
a new package
Change isn’t easy….but we’re here to help
Blogs.msdn.com/ie
Msdn.com/ie
Msdn.com/iecompat
Sometimes simple is the answer
Compatibility View
Key Deployment Technologies
Customization
• Internet Explorer Administration Kit
(IEAK)
Deployment
• Application: System Center Configuration
Manager 2007
• Operating System: Slipstreaming
Management
• Group Policy
Updating
• Windows Update
• System Center Configuration Manager 2007
• Windows Server Update Services (WSUS)
Customization
Customization
• Internet Explorer Administration Kit
(IEAK)
Deployment
• Application: System Center Configuration
Manager 2007
• Operating System: Slipstreaming
Management
• Group Policy
Updating
• Windows Update
• System Center Configuration Manager 2007
• Windows Server Update Services (WSUS)
Internet Explorer Administration Kit
Customization Wizard
Creates customized
versions of IE
Profile Manager
Manages
customization settings
Supports automatic
configuration
Audience Types
Internet Service Provider
(ISP)
ISP users
Internet Content Provider
(ICP)
Web Sites
ISVs
Corporate Administrator
Corporate employees
IEAK Guidelines - http://go.microsoft.com/fwlink?LinkId=133798
Configuring With The IEAK
IEAK 8
IEAK 7
Search
You can add and configure Visual Search providers for your
installer.
Web Slices
You can add Web Slices to your custom Internet Explorer 8
package.
Accelerators
You can include custom defaults for Accelerators in Internet
Explorer 8.
Home Page &
Tab Groups
You can configure a Home Page or a set of Home Pages using
Tab Groups.
First Run &
Welcome Page
You can configure the First Run Experience for Internet
Explorer 8.
RSS Feeds
You can add unlimited Feeds in 1 Folder
Favorites Bar
You can add Links and Folders to the Favorites Bar
You can add RSS Feeds to the Favorites Bar.
You can add Web Slices to the Favorites Bar.
Compatibility View
You can choose if content is rendered in Internet Explorer 8
standards mode or Internet Explorer 7 mode.
Additional New
Settings
You can add a custom User-Agent String, and you can customize
the Browser Title bar
All Other Settings
You can use still set all other included in the IEAK 7 for IE7.
Microsoft did not release IEAK 6
IEAK Customization Wizard
Deployment
Customization
• Internet Explorer Administration Kit
(IEAK)
Deployment
• Application: System Center Configuration
Manager 2007
• Operating System: Slipstreaming
Management
• Group Policy
Updating
• Windows Update
• System Center Configuration Manager 2007
• Windows Server Update Services (WSUS)
Deployment Options
Managed Deployment
System Center Configuration Manager is one
example
Use the .MSI package created by the IEAK
Customization Wizard
Four step process for System Center
Configuration Manager distribution
1.
2.
3.
4.
Create the Configuration Manager package
Create the installation program
Assign to a distribution point
Create an advertisement
How to Slipstream
1. Stage IE installation media
•
Extract standard installation program
2. Stage operating system installation media
•
3.
4.
5.
6.
From installation DVD
Mount operating system Image file (.wim)
Use PKGMGR to add Internet Explorer 8
Unmount operating system image
Create ISO for OS Image
Using PKGMGR
Pkgmgr.exe
/n:.\updatepackage\Windows6.0-KB944036-x86.xml
/o:.\mount;.\mount\windows
/s:.\sandbox
/l:.\slipstream.log
/n – unattended installation answer file
/o – location of boot manager ; location of Windows directory
/s – temporary storage
/l – log file
Deployment versus Slipstreaming
Deployment
Familiar process
Applies to all supported
operating systems
Windows XP
Windows Server 2003
etc.
Necessary if operating system is
already deployed
Slipstreaming
Faster
No additional reboots
May include updates and
language packages
Applies only to Vista and
Windows Server 2008
Deploy Phase
Depth of Group Policies will be determined by
the needs of the customer
Configure based on needs rather than trying to
cover all policies
New and recommended Group Policies can be
found here:
http://technet.microsoft.com/enus/library/cc985351.aspx
Management
Customization
• Internet Explorer Administration Kit
(IEAK)
Deployment
• Application: System Center Configuration
Manager 2007
• Operating System: Slipstreaming
Management
• Group Policy
Updating
• Windows Update
• System Center Configuration Manager 2007
• Windows Server Update Services (WSUS)
Group Policy
About 1300
group policies
User and
machine
configuration
Machine takes
precedence
Found in
Administrative
Templates in GP
editor
Group Policy
Commonly Set Group Policies
Customer Need
Group Policy
Lock down security settings
\Internet Control Panel\Disable the
Security Page
Secure users from phishing sites
\Prevent Bypassing SmartScreen Filter
Warnings
Prevent users from installing unapproved
add-ons
\Security Features\Add-on
Management\Add-on List
\Security Features\Add-on
Management\Deny all add-ons unless
specifically allowed in the Add-on List
Secure users from sites with fraudulent
certificates
\Internet Control Panel\Prevent ignoring
certificate errors
Ensure specific web sites are in specific
security zones
\Internet Control Panel\Security Page\Site
to Zone Assignment List
Updating
Customization
• Internet Explorer Administration Kit
(IEAK)
Deployment
• Application: System Center Configuration
Manager 2007
• Operating System: Slipstreaming
Management
• Group Policy
Updating
• Windows Update
• System Center Configuration Manager 2007
• Windows Server Update Services (WSUS)
Windows Update
Useful for updating and installing Internet Explorer
IE8 is now available through Automatic Updates
http://blogs.msdn.com/ie/archive/2009/04/10/prepa
re-for-automatic-update-distribution-of-ie8.aspx
Updates will be installed based on settings on the
individual clients
Effective, but doesn’t allow for centralized
management
Consider implementing update management system…
Update Management with WSUS
Individual WSUS servers connect to Windows
Update to download update packages
Administrators can test updates to ensure
compatibility before deployment
Once approved, the updates are available to
target machines
System Center Configuration Manager makes
this even better…
Blocker Toolkit
Blocks IE from being installed via Automatic Updates
Gives you control of when IE is installed
Creates a registry key
HKLM\SOFTWARE\Microsoft\Internet
Explorer\Setup\8.0\DoNotAllowIE80
Two possible settings
0: Allows AU to install IE8
1: Blocks AU from installing IE8
Two components in the toolkit
ADM template for Group Policy
IE80Blocker.cmd
/B to block
/U to unblock
Resources
www.microsoft.com/teched
www.microsoft.com/learning
Sessions On-Demand & Community
Microsoft Certification & Training Resources
http://microsoft.com/technet
http://microsoft.com/msdn
Resources for IT Professionals
Resources for Developers
Related Content
CLI314 - An Inside Look at Windows Internet Explorer Security (Berlin 2 – Hall 7-3a)
CLI11-IS Windows Internet Explorer 8 in the Enterprise (Interactive Theatre 3 – BLUE)
WCL20 – HOL Deploying Internet Explorer 8 In the Enterprise
WCL21 – HOL Preparing for Windows Internet Explorer 8: Application Compatibility
WCL22 – HOL Using Accelerators and WebSlices in the Enterprise
WCL25 – Internet Explorer 8: Build Your Own Search Suggestions Provider
WCL26 – Internet Explorer 8: Building Web Slices
WCL27 – Internet Explorer 8: Managing Security Settings in the Enterprise
WCL28 – Managing Internet Explorer 8 In the Enterprise
Internet Explorer Resources
Feature Overview
www.microsoft.com/ie8
Engineering Blog
blogs.msdn.com/ie
Internet Explorer TechNet Site
technet.microsoft.com/ie
IE8 Blocker Toolkit
www.microsoft.com/downloads/details.aspx?FamilyID=21687628-5806-4ba6-9e4e8e224ec6dd8c&displaylang=en
Group Policy Settings for IE8
www.microsoft.com/downloads/details.aspx?familyid=AB4655F2-0A3C-42EB-974D24B2790BF592&displaylang=en
Internet Explorer Administration Kit (IEAK)
technet.microsoft.com/en-us/ie/bb219517.aspx
Complete an evaluation
on CommNet and enter to
win an Xbox 360 Elite!
© 2009 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should
not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS,
IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.