IE10 Automatic Update Blocker Toolkit Available for Windows 7

Business and organizations that want to manage their own update schedule can use the IE10 Automatic Update Blocker Toolkit to disable automatic delivery of Internet Explorer 10. This Blocker Toolkit—like its predecessors for IE9, IE8, and IE7—is now available on the Microsoft Download Center. While we encourage all customers to upgrade their browser to the latest version as quickly as possible, this approach lets organizations control when they are ready to deploy IE10 to their Windows 7 users. All other customers with Windows Update not using the toolkit will be automatically upgraded from IE9 to IE10.

The IE10 Automatic Update Blocker Toolkit can be used to prevent Internet Explorer 10 from being automatically installed on users’ Windows 7 machines when it is available via Automatic Update. This Toolkit has no expiration date and is configured either by running the registry file on the client machine or by deploying Group Policy in domain joined environments. The toolkit also provides an unblock procedure that allows IE10 to be installed through Automatic Update.

When IE10 Release Preview is installed on Windows 7, the IE10 Automatic Update Blocker Toolkit does not block automatic deployment of IE10. This ensures that users running IE10 Release Preview continue to receive the latest security fixes. Additionally, the toolkit does not prevent users from manually installing IE10 from the Microsoft Download Center.

There are different registry keys used to block or unblock automatic delivery of IE10 and IE9. If the IE9 Blocker Toolkit was previously used to block IE9 from being offered as an important update, use the IE10 Blocker Toolkit in addition to the IE9 Blocker Toolkit to prevent both IE9 and IE10 from being offered via Automatic Update.

Organizations that use an update management solution such as Windows Server Update Services (WSUS) or System Center Configuration Manager (SCCM) do not need to deploy the IE10 Automatic Update Blocker Toolkit. WSUS and SCCM allow organizations to fully manage deployment of updates released through Windows Update, including IE10.

— Kevin Luu, Program Manager, Internet Explorer

Comments (26)
  1. Prior Semblance says:

    So does this mean IE10 is almost out of the preview stage?

  2. Distasteful Decision says:

    I feel the need to express a distaste for this.

    The web is a continuously evolving platform where other browser-makers are releasing ever more frequent iterations shortening the time between something being defined in a spec, and when it's available in John End-user's browser. Yet you're releasing tools that allow organizations to block updates to your already infrequently updated browser. Just seems like the exact opposite of what's good for the evolving web.

  3. Nacimota says:

    @Distasteful Decision

    I'm sure MS would prefer everyone to be using the latest version of IE but certain groups will not do that for compatability reasons. We're usually talking about enterprise environments that have big, outdated web apps running on their intranet which they aren't willing to invest money in to bring them up to date with newer browsers. It's sad, but that's just the way it is. Network admins need to have complete control over the machines they administer and unfortunately, blocking updates for a browser needs to be a part of that.

  4. Russ says:

    Well, what is WORSE is that (1) XP users have no way to get a modern browser (IE9 or IE10) and that every new IE browser tries to preserve bugs in older webpages that were designed of older versions of but always but makes matters worse but introducing new bugs. And worse than all that is in IE9 (and I assume IE10) the same page can render entirely differently if it is frames or not.

    When coming up with a new browser just cut the cord on backward compatibility with bugs in standards mode for older browsers, and only have 1 damm quirks mode render.

    Aside from the lousy debugger (in the old days it was the best, now it is the worst) it is all the various compatibility issues  that are unique to IE that makes IE less interesting to support with every release.

  5. @Distasteful Decision  

    Are you seriously suggesting MS _enforce_ a software update on people, whether they want it or not?

    When it turned out that the autoupdate component would update itself – ONLY itself – without asking first, there was a massive outcry.  The chance they'd ever consider forcing a new version of IE on people is nil.

  6. @Russ: Keep on dreaming about "just cut the cord on backward compatibility". This never gonna happen! MS tried with IE7 and it didn't work.

  7. @thommck says:

    When is the expected Release-To-Web date?

  8. @nkg says:

    good news!!!!!!

  9. Andreas says:

    What's the classification of IE10 in WSUS?

  10. Yuhong Bao says:

    @Distasteful Decision: And remember MS continues to release security updates for versions of IE down to what was originally shipped with the Windows version until the Windows version ends support.

  11. Sam says:

    @Distasteful Decision

    I agree completely.

  12. hAl says:


    According to Micrsofts own brandnew siteadvsor is it time to update this blogs old jquery library

  13. Bob Saget says:

    there's no need for this. Just implement a single WSUS profiles on a network server and be done with this.

  14. Mr. Smith says:

    @IE-Team, @Microsoft.

    Would you please update the blog and comment system anytime soon? Come join HTML5 and its fun! Please update this site. If you think there is no need, please let us save your time. I have the complete blog system with source ready and I can give you anonymously… just deploy it on your server and you make at least few thousand people happy!

  15. Steve says:

    I just had a recent question from a fellow developer.

    For Windows 8 RT devices (I know they have Office, IE, Exploring, etc.) but can developers actually compile apps that will run on the RT desktop? (e.g. not the silly little Metro mode/Windows Store apps/games) – real Windows applications designed to run on the ARM architecture.

    Is it possible? or is the RT desktop a closed platform?

  16. last child says:

    like ya

  17. @Steve says:

    You do not have to make Metro apps silly nor little.

    They can be like real Windows applications.

    Except they will be working on full screen (or snapped modes) only.

  18. tomescu cosmin says:

    sa nu se blocheze

  19. @Steve: No, developers cannot build their "Desktop" applications for Windows RT devices.

    While compilers (native and managed) exist for ARM, the Windows RT kernel will not load any binaries not signed with a specific certificate controlled by Microsoft. This platform lockdown was an deliberate design decision by the Windows team, in support of the power/battery-life goals and performance characteristics of the ARM platform. Having said that, there's already at least one (awkward) "jailbreak" of the platform which allows you to run (very slowly) code compiled for the ARM, circumventing the certificate check.

    Personally, I expect that future Intel chips are going to satisfy developers' desire to build "desktop-style" applications for tablets.

  20. Brian Peiris says:

    What a shame. Just when I though IE was catching up.

  21. I am 100% a Microsoft guy and I always used IE. Other browsers I use are just for testing purposes as I am a web developer. Today, I am thinking about leaving IE. Many of my friends are adopting Chrome or FF. Even those working on (or for) Microsoft are doing that. I think the future of IE, so it may survive, will be based on Webkit… You are killing IE and many of its fans. I had many fights on Facebook for defending IE… Now, I see some of those people were right… Why do many websites work on Chrome, FF, Safari or Opera and not on IE? Come on, it's time to build a good browser! I use the same Brian Peiris's words… Just when I thought IE was catching up…

    (I am from Portugal, sorry for my bad english.)

  22. @Webkit fans says:

    If everyone uses webkit then there's no more competition in browsers, do you know what happens without competition?  Also most of the websites I've encountered don't work in IE because they use browser detection instead of feature detection.  For example, my website host has an outdated version of phpmyadmin that doesn't work in IE10.  But if I go into the dev tools and change my user agent to Chrome or anything else, it magically works.  So the biggest thing holding back IE10 is websites that suck at trying to support ancient versions of IE and never test in the newer versions.

  23. @Prior Semblance – Yes, rumor has it that IE10 for Windows 7 will finally come out of "preview" later this month, based upon the previous period between the IE9 blocker and the actual release of IE9 – see:…/and-the-final-release-date-for-internet-explorer-10-on-windows-7-is

    @Distasteful Decision – I totally agree, Microsoft are certainly holding back the web with tools like this, and the lack of timely updates to IE over the years! But I also agree with @Nacimota's point that many corporate environments don't always want to update to the latest IE due to compatibility issues with some of the web-based applications. But to be honest, in these cases, corporations should be putting pressure on the developers of such apps to ensure they'll run in the latest version of IE! …and if the developers of the web apps their using can't support their software in the most recent versions of IE, maybe businesses need to change and use web apps that ARE maintained by the developers!

  24. Walter villegas says:

    Necesito todas las aplicacions en Espanol

  25. Ed says:

    Any chance there will be a "FixIt" for the bitlocker. Some places I know may not want to use IE10 immediately and they rely on Windows Update – no WSUS or others.

  26. Ed says:

    @Russ : You are expecting Microsoft to support Windows XP – an OLD OS – indefinitely? Also read Microsoft's lifecycle site. It states that while a product is in full support, it gets all updates. As soon as it is in extended support only security updates as well as updates that are deemed necessary. Not updated are any components. IE is a component like Windows Media Player, Windows Live Essentials, etc. At least Microsoft [and adobe] spells out this information.  Google makes it up as they go along.

    Oh. You can always use Chrome. 🙂 [Google wouldn't mind.]

Comments are closed.

Skip to main content