internet explorer 8 for admins
DESCRIPTION
Internet Explorer 8 for Windows AdministratorsTRANSCRIPT
Internet Explorer
8for Administrators
Introduction
Kelly Jones• Senior Consultant, Sogeti USA
• [email protected] • 10+ years industry experience
Agenda
• Enterprise Ready• Reduced Security Risks• Improved Productivity
Enterprise Ready
Compatibility
Deployment
Management
Compatibility
Compatibility View• Compatibility View Button
• Settings are remembered per site
Compatibility View Settings
Tools Compatibility View Settings window
• Add/Remove sites
• Intranet Zone sites are in compatibility view by default
Compatibility View Notes
Notes
• Switching in and out of compatibility view doesn’t require a browser restart
• Compatibility View settings can be controlled through Group Policy
Application Compatibility Toolkit (ACT)
IE8 additions to ACT• Cross-Site Scripting Filter• Standards Mode• Windows Reuse Navigation Restriction• MIME restrictions• File name restriction• Control Block• DEP/NX• ActiveX control blocking• Intranet integrity• Codepage sniffing• Web Proxy handling• Ajax navigation
Deployment Options
Standalone installation• Active Directory• SCCM (System Center Configuration Manager)• WSUS (Windows Server Update Services)
Slipstream• IE8 added to OS image
Standalone Installation
Packages
• Use the publically available package downloaded from Microsoft
- or –
• Create custom package
Custom IE8 Deployment Packages
Use IEAK (IE Administration Kit) to create:
• Full package (IE8 + customizations + MSI Installer)
• Configuration only (customizations + MSI Installer)
• CD package (CD Auto-run + IE8 + customizations)
IE Administrators Kit
Create custom, “light weight” branded packages• Can be installed after browser installed (no need to reinstall
the browser)• Example settings: default search provider, home page(s),
toolbars, ActiveX controls
• Users can still change settings after install
IEAK License mode
Independent Content Provider (ICP)
Independent Service Provider (ISP)
Corporate
Slipstream Installation
IE7 Slipstreaming:• Install OS• Install IE7• Install updates• Recapture Image
Slipstream Installation
Slipstream
Use WAIK (Windows Automated Installation Kit)• Tools• Documentation
WAIK/Slipstream works on Vista/Server 2008
IE8 Management Enhancements
Group Policy• New features can be configured or disabled (Accelerators,
search providers, etc)• Access to Developer Tools can be configured
• More than 100 new policies (bringing IE total to over 1,300 policy settings)
Reduce Security Risks
Enhanced Delete Browsing History
SmartScreen Filter
InPrivate Browsing
ActiveX Management
Domain Name Highlighting
Enhanced Delete Browsing History
Enhanced delete:• Option(s) to delete history for all web sites except those in
favorites
Environments that need enhanced delete:• Sensitive data (defense/security/law enforcement)• Regulatory or compliance reasons
Enhanced Delete
SmartScreen Filter
Helps protect against deceptive web sites
IE 8 improvements:• Better UI• Faster performance• New heuristics• Anti-malware support• Improved Group Policy
Support
InPrivate Browsing
Not stored when InPrivate Browsing is activated:• User’s browsing history• Temporary Internet files• Form data• Cookies• Usernames/passwords
Not stored or retained by IE or on the system
InPrivate Browsing
InPrivate Filtering
Blocks “3rd party” sites/links after a set number of sites• Ad networks• Stat counters
Not tied to InPrivate Browsing
ActiveX Management
ActiveX is a potential avenue of attack
Per-User ActiveX• ActiveX control is installed only for that user
Per-Site ActiveX• An installed ActiveX control may be limited to only running on
certain sites
Domain Name Highlighting
Domain Name highlighted:
Secure site with Cert name displayed
Unsafe site – determined by SmartScreen Filter
Other Security
Application Protocol Prompt• IE8 will now prompt before
launching application protocols
File Upload Control
Tab Isolation
IE 7• If one tab crashed, entire browser crashed
IE 8• If one tab crashes, only that tab crashes
Crash Recovery• Crashed tab will be restored
• Including data entered into most web forms
Enhanced Add-on Management
Toolbars and other add-ons are common cause of crashes
Manage Add-ons:• New close button on toolbars
Enhanced Add-on Management
Enhanced Add-on Management
New types of Add-ons to Manage• Explorer Bars• Search Providers• Accelerators
No Add-ons Mode • Safe mode for troubleshooting• No 3rd party code runs in this mode• Can disable problem controls• Can repair via Windows Update
Enhanced Add-on Management
Group Policy• IT can disallow a particular add-on from being installed
Diagnose Connection Problems Button
May reduce the number of calls to the helpdesk
Local Touch—Global Reach
Redesigned “New Tab” Page
Local Touch—Global Reach
Smart Address Bar
Smart Address Bar
• Typed addresses• Autocomplete suggestions• History• Favorites• Feeds• Keyboard shortcuts• Relevancy Sorting• Starting a search with ? in the bar• Files and folders
Local Touch—Global Reach
Smart Address Bar
Demonstration
Local Touch—Global Reach
Enhanced Tabbed Browsing
Tab Groups
• New tab opened next to originating tab• Both are tabs are the same color• If a user closes a tab that’s part of group, then another tab
from same group will be displayed• Right click to:
• Close tab• Close tab group• Remove tab from group• Refresh one or all tabs• Open a new tab• Reopen the last tab closed• See a list of all recently closed tabs and/or reopen them
Summary
IE 8 = Enterprise Ready Browser
More Compatible, Deployable, Manageable
More Secure
More Productive for users
Further Resources
“Internet Explorer 8 Technology Overview for Enterprise and IT Professionals” – January 2009
Group Policy for IE8
IE Application Compatibility VPCs• IE6 XPSP3, IE7 VIS, IE7 XPSP3, IE8 XPSP3
My blog: http://geekswithblogs.net/kjones • Or contact info: http://kdjones74.myplaxo.com/
Thank You