Customization and Administration
You can customize Windows® Internet Explorer® 9 in many ways to accommodate the preferences and needs of your organization and users. To help you get started, this section summarizes how you can use the Internet Explorer Administration Kit (IEAK) 9 to customize and administer Internet Explorer 9 installations. Specifically, this section focuses on the ways that corporate administrators can use the IEAK 9.
For more information about customization and administration, see the following topics in this section:
Overview: Internet Explorer Administration Kit 9
IEAK 9 contains programs and tools to help you customize, deploy, and administer Internet Explorer 9 within your organization or for your customers. IEAK 9 can be used in network environments with or without Active Directory®. The typical Internet Explorer 9 planning and deployment checklist for organizations using IEAK 9 includes:
Assessing your users' needs.
Analyzing your organization's needs.
Developing a customization and deployment strategy.
Establishing a deployment lab where you can test your deployment strategy.
Gathering the URLs, components, and other information that you will need.
Creating a custom Internet Explorer deployment package.
Digitally signing the custom cabinet (.cab) files that you create with IEAK 9, and the custom programs that you include (if your users will download your custom browser packages over the Internet).
Establishing a pilot group to validate your deployment plan and configurations.
Understanding IEAK 9 components
Before using IEAK 9, you should familiarize yourself with the programs and tools provided to enable you customize and administer Internet Explorer 9 for your organization. IEAK 9 includes the following components and tools:
IEAK Help File. The IEAK Help file (ieakhelp.chm) contains detailed information about planning, creating, deploying, and managing custom installations of Internet Explorer 9 using IEAK 9.
Internet Explorer Customization Wizard 9. The Internet Explorer Customization Wizard 9 provides step-by-step screens that you can use to create custom packages to deploy and configure Internet Explorer for the users and computers in your organization. If Internet Explorer is already installed, you can also use this wizard to create a package that contains configuration information only.
IEAK Profile Manager. As a corporate administrator, you can use IEAK Profile Manager to maintain browser configuration settings on your users' computers after Internet Explorer is deployed. With IEAK Profile Manager, you can open existing automatic configuration .ins files, change settings, save those files, and then use the Internet Explorer 9 Automatic Configuration feature to refresh the settings for your users and computers. You can also use the IEAK Profile Manager to enable automatic configuration if you did not enable this feature as part of an initial installation.
Using IEAK 9 in a corporate environment
As a corporate administrator, you can save time by centrally administering Internet Explorer 9 installations. When you run the Internet Explorer Customization Wizard 9 to create custom browser packages, you can determine:
How Internet Explorer 9 will be installed.
How the browsing software and Internet Explorer 9 components are customized.
What browser and messaging options are available to your users.
If your organizational needs change after Internet Explorer 9 is installed, you can use the IEAK Profile Manager to update browser settings. Then you can use the automatic configuration feature in Internet Explorer 9 to deploy the updated settings to your users' computers. For more information, see Managing Browser Settings.
You can also set policies and restrictions for the browser through Group Policy, including security, messaging, and desktop settings. These policies and restrictions can help you manage your organization's resources and bandwidth. Does your accounting department have different needs than your marketing department? You can create different profiles that contain settings and restrictions tailored to each department.
To make installation easier for your users, you can configure Internet Explorer 9 so that they can install the browser with few or no setup choices. This type of “silent” setup is often performed after business hours, when employees are not at their desks. You can further control this type of installation by using command-line switches or batch files. Because you are determining setup choices for your users, you can create only one silent install setup option.
If you suppress all user feedback, including response to error messages and status information, your setup plan must include error handling. If you suppress restarting after installation, you must create a custom program or script to handle restarting and to ensure that Internet Explorer 9 is set up correctly.
When you install Internet Explorer 9, you might also find it convenient to include components you have written, such as virus-checking programs or scripts. You can install up to 16 additional components in a custom browser package.
Customizing the browser
You can customize the appearance and behavior of the browsing software. These customizations can help you create a standard corporate desktop that is easier to manage.
To customize the browser, you can add your organization's name or other text to the title bar. For example, the phrase "Windows Internet Explorer provided by Woodgrove Bank" could appear on your title bar.
You can preset the following webpages and links:
Corporate support page
Users' home pages
Users' search providers
Links on the Favorites menu
Links in the Links folder
Add-on Components page (for optional components)
For more information about customizing the browser, see Internet Explorer Administration Kit 9 content in the Internet Explorer TechNet library.
Installation media and methods
After you run the Internet Explorer Customization Wizard 9 to build custom browser packages, you can use various methods to distribute them to your users. You can automate installations of Internet Explorer 9 with preselected components and browser settings so that no user action is required, or you can allow users to choose from up to ten installation options.
You can distribute a customized Internet Explorer 9 package from:
FTP or web download sites on the Internet or the intranet.
Flat network shares (all files in one directory).
Single-disk branding (customize existing installations of Internet Explorer 9).
System Center Configuration Manager or Systems Management Server (SMS).
The following sections discuss some of the factors to consider when you choose your distribution media and methods.
For more information about selecting your media for distribution, see Customizing Internet Explorer 9 using IEAK in this deployment guide.
Setting system policies and restrictions
When users customize their programs, they sometimes create challenges for corporate administrators. Although some changes simply reflect user preferences, other changes might make it difficult for corporate administrators to manage resources, control security, or maintain consistent functionality.
If you are familiar with system policies, you can also import your existing administration (.adm) files. Then after the browser is installed, you can use the IEAK Profile Manager to update and maintain these settings.
Both the Internet Explorer Customization Wizard 9 and the IEAK Profile Manager have graphical interfaces that enable you to set and clear options. You can lock settings, which prevents users from changing them. As you prepare to create your custom browser packages, consider whether you want to control options on a per-computer or per-user basis. If you have roaming users whose needs differ from other users', you might not want to lock settings on a per-computer basis.
To accommodate the varying needs of your organization and its users, consider the following customization options:
Deploy a custom browser package that has your commonly used intranet sites saved and organized under Favorites.
Create a CD-ROM setup for users in a remote country or region, so that they do not need to connect to the local area network (LAN) or wide area network (WAN) to download your custom browser packages.
Distribute as part of the installation either approved or corporate ActiveX® controls, to minimize post-deployment support scenarios for locked down operating system configurations.
Increase the level of security for employees who will download your custom browser packages from the Internet. You can create specific versions with enhanced security options, or use Automatic Configuration to modify their security settings.