How to Install Internet Explorer 5.0 Standalone on Metaframe and Windows Terminal Server.

As always be sure and do a backup and and rdisk /s before attempting the install of any new software on Terminal Server. This procedure works for IE 5.5 also

I have made the policy .adm files for IE 5 available for download at /files/ieadm.zip. The policy .adm files for IE 5.5 are available for download at /files/ie55adm.zip. Also remember to disable the system sounds that are created by IE5 by using the tip at /soundoff.cfm.

There is a good document on how to use the IEAK at http://www.microsoft.com/windows/ieak/en/deploy/deploycorp55.exe

Be certain that the you have a decent size paging file on the root drive or IE5.x will not install..the error message you will get is application is already installed. further after you run IE5.x and a reboot is done you MUST log back on with an account that has admin priviledges so that the installation can complete. You MUST also change to install mode by typing change user install and run the connection wizard as an admin so that it will not run for all users.

This tip comes to us with many thanks to:

• Ed Evans
• Sr. NT Windows Terminal Server Specialist
• Purdue University Computing Center
• edevans@purdue.edu

Note: I have edited and added comments where necessary. -Jim

Internet Explorer 5.x Installation Instructions Provided by the Windows Terminal Server Core Group

This installation should be performed at the console. This installation requires the server to be rebooted. It is recommended to logout all users and disable logons prior to beginning.

There are 3 components that will be needed to complete this installation: the Internet Explorer 5.0 installation program (ie5setup.exe), inetset.adm from the Internet Explorer Administration Kit (IEAK) for configuring policies, and the Internet Explorer 5.0 Patch for "Malformed Favorites Icon" Vulnerability. All of these products are freeware from Microsoft and can be downloaded from the following locations.

• Internet Explorer 5.0: http://www.microsoft.com/windows/ie/default.htm
• Internet Explorer 5.0 Patch: http://www.microsoft.com/windows/ie/security/favorites.asp
• IEAK 5.0: http://www.microsoft.com/windows/ieak/en/download/default.asp.

Jim's Note: You will also want to download apply the Java Virtual machine Security hole fix from: http://download.microsoft.com/download/javasdk/install/3186/w9xnt4/en-us/msjavx86.exe

Internet Explorer 5.0 Installation:

1. Warn any connected users that the upgrade is taking place and the server will be rebooted. This can be done by sending a message with the Citrix Server Administration application.
2. Disable new logons on the server by right clicking on the server name in Citrix Server Administration and selecting Disable New Logons.
3. Open the Add/Remove Programs control panel and click the Install…button on the Install/Uninstall tab. Click Next.
4. When the Command line for installation program dialog box appears, browse to the location where ie5setup.exe was saved and click Next.
5. Select All users begin with common application settings and click Next.
6. The Windows Update: Internet Explorer and Internet Tools screen will appear. Select I accept the agreement and then click Next.
7. The next screen prompts you to select the appropriate installation type for Internet Explorer. Select Install Minimal, or customize your browser. Click Next.
8. The installer will now provide you the opportunity to customize the installation. (Jim's Note:You can use the default setting for the directory but if you are installing on a load balanced farm it is best to be certain all servers have the same directory. If the server previously had IE4 on it, it will default to the Program Files Plus directory, if not it will be put in program files, internet explorer folder...be certain these things match up across servers. If you do not choose customize you are not given a choice where to install IE5.) Select Minimal for the installation type and make the following changes: · Select Microsoft virtual machine under Internet Explorer 5 · Unselect Windows Media Player under Multimedia Components This makes a total of 4 items that will be selected: · Internet Explorer 5 Web Browser · Internet Explorer Help · Microsoft virtual machine · Visual Basic Scripting Support Note: If this is an upgrade from Internet Explorer 4.01, you may not be able to unselect the Offline Browsing Pack, in that case there would be 5 items marked for installation. Click Next.(Jim's note:You should also add outlook express if you expect to be mailing web pages)
9. Click Yes if prompted to create the installation folder
10. Select a download site and click Next.
11. Click Finish to restart the computer
12. Once WTS restarts, logon as an administrator to let installation finish.

Internet Explorer 5.0 Patch for "Malformed Favorites Icon" Vulnerability

1. Logons are automatically enabled when the server is rebooted. Launch Citrix Server Administration and disable new logons again.

2. Download the Internet Explorer 5.0 Patch for "Malformed Favorites Icon" Vulnerability from the above location.

   Note: More information on this vulnerability can be found in Microsoft Security Bulletin MS99-018 at http://www.microsoft.com/security/bulletins/ms99-018.asp.

3. Open the Add/Remove Programs control panel and click the Install button on the Install/Uninstall tab. Click Next.
4. When the Command line for installation program dialog box appears, browse to the location where q231452.exe was saved and click Next.
5. Select All users begin with common application settings and click Next.
6. Click Yes when prompted to install the update.
7. You should receive a message saying This update has been installed. Click OK.

8. Select the Next button on the After Installation dialog box followed by the Finish button on the Finish Admin Install dialog box to complete the installation.

   (Jim's Note: It is at this point that you should also install the Java Virtual Machine Security fix. This fix requires a reboot and that you re log on as administrator after the reboot for it to finish. Be sure and install this fix in user install mode.)

Configuring Internet Explorer 5.0:

1. Download ie5policy.zip from the above location. Extract inetset.adm and save it in c:\wtsrv\inf. Note: If Internet Explorer 4.01 was installed on the WTS server, you will be prompted to overwrite an older version of inetset.adm. Select Yes to replace the older file with the newer one.
2. Launch the System Policy Editor (under Start, Programs, Administrator Tools).
3. Add the inetset.adm template to the System Policy Editor as follows: · Click Options, Policy Template… · Click Add… and enter c:\wtsrv\inf\inetset.adm for File name: · Click Open. · Click OK on the Policy Template Options window. Note: This step is not necessary if c:\wtsrv\inf\inetset.adm is already listed in the Policy Template Options window.
4. Open the WTS policy by clicking File, Open Policy. For File name: enter c:\wtsrv\NTConfig.pol and click Open.
5. Double click on Default User and make the following changes under Advanced settings: · Click on Browsing until a check mark appears in the toggle box. Under Settings for Browsing, make certain only the following items are enabled (i.e. have a check mark in their toggle boxes): · Disable script debugging · Use smooth scrolling · Enable page transitions · Browse in a new process · Enable page it counting · Underline links Always · Show Go button in the Address bar · Show friendly http error messages · Click on Security until a check mark appears in the toggle box. Under Settings for Security, make certain only the following items are enabled (i.e. have a check mark in their toggle boxes): · Enable Profile Assistant · Delete Save pages when browser closed · Warn if forms submit is being redirected · Warn if changing between secure and not secure mode
6. Click OK to close the Default User Properties window.
7. Double click on Default Computer and make the following changes under Component Updates: · Disable Periodic check for updates to Internet Explorer and Internet Tools (the toggle box should be clear, not gray) · Disable Help Menu>About Internet Explorer (the toggle box should be clear, not gray)
8. Click OK to close the Default Computer Properties window.
9. Save the file and exit the System Policy Editor.
10. Open My Computer and look for a new folder called Scheduled Tasks. This is a update to the Schedule service that sometimes installs with Internet Explorer 4.0. If Scheduled tasks does not exist, skip to step 17.
11. Browse to c:\wtsrv. Right click on the tasks folder and select Properties.
12. Select the Security tab and click Permissions. In the Name: window, select Everyone and click the Remove button.
13. Select Replace permissions on Subdirectories. Click OK.
14. Locate mstask.dll in c:\wtsrv\system32. Right click on the mstask.dll and select Properties.
15. Select the Security tab and click Permissions. In the Name: window, select Everyone and click the Remove button. Click OK.
16. Launch regedt32 and delete the following registry key to get rid of Dial Up Networking(Note the line is wrapped for readability): · LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ MyComputer\NameSpace\{D6277990-4C6A-11CF-8D87-00AA0060F5BF}
17. Reboot the WTS server. Logons will automatically be enabled after the reboot.