Internet Explorer 8 for Admins

3,774 views

Published on

Internet Explorer 8 for Windows Administrators

Published in: Technology
  • Be the first to comment

Internet Explorer 8 for Admins

  1. 1. Internet Explorer 8 for Administrators
  2. 2. Introduction <ul><li>Kelly Jones </li></ul><ul><ul><li>Senior Consultant, Sogeti USA </li></ul></ul><ul><ul><ul><li>[email_address] </li></ul></ul></ul><ul><ul><li>10+ years industry experience </li></ul></ul>
  3. 3. Agenda <ul><ul><li>Enterprise Ready </li></ul></ul><ul><ul><li>Reduced Security Risks </li></ul></ul><ul><ul><li>Improved Productivity </li></ul></ul>
  4. 4. Enterprise Ready <ul><li>Compatibility </li></ul><ul><li>Deployment </li></ul><ul><li>Management </li></ul>
  5. 5. Compatibility <ul><li>Compatibility View </li></ul><ul><ul><li>Compatibility View Button </li></ul></ul><ul><ul><ul><li>Settings are remembered per site </li></ul></ul></ul>
  6. 6. Compatibility View Settings <ul><li>Tools  Compatibility View Settings window </li></ul><ul><ul><li>Add/Remove sites </li></ul></ul><ul><ul><li>Intranet Zone sites are in compatibility view by default </li></ul></ul>
  7. 7. Compatibility View Notes <ul><li>Notes </li></ul><ul><ul><li>Switching in and out of compatibility view doesn’t require a browser restart </li></ul></ul><ul><ul><li>Compatibility View settings can be controlled through Group Policy </li></ul></ul>
  8. 8. Application Compatibility Toolkit (ACT) <ul><li>IE8 additions to ACT </li></ul><ul><ul><li>Cross-Site Scripting Filter </li></ul></ul><ul><ul><li>Standards Mode </li></ul></ul><ul><ul><li>Windows Reuse Navigation Restriction </li></ul></ul><ul><ul><li>MIME restrictions </li></ul></ul><ul><ul><li>File name restriction </li></ul></ul><ul><ul><li>Control Block </li></ul></ul><ul><ul><li>DEP/NX </li></ul></ul><ul><ul><li>ActiveX control blocking </li></ul></ul><ul><ul><li>Intranet integrity </li></ul></ul><ul><ul><li>Codepage sniffing </li></ul></ul><ul><ul><li>Web Proxy handling </li></ul></ul><ul><ul><li>Ajax navigation </li></ul></ul>
  9. 9. Deployment Options <ul><li>Standalone installation </li></ul><ul><ul><li>Active Directory </li></ul></ul><ul><ul><li>SCCM (System Center Configuration Manager) </li></ul></ul><ul><ul><li>WSUS (Windows Server Update Services) </li></ul></ul><ul><li>Slipstream </li></ul><ul><ul><li>IE8 added to OS image </li></ul></ul>
  10. 10. Standalone Installation <ul><li>Packages </li></ul><ul><ul><li>Use the publically available package downloaded from Microsoft </li></ul></ul><ul><li>- or – </li></ul><ul><ul><li>Create custom package </li></ul></ul>
  11. 11. Custom IE8 Deployment Packages <ul><li>Use IEAK (IE Administration Kit) to create: </li></ul><ul><ul><li>Full package (IE8 + customizations + MSI Installer) </li></ul></ul><ul><ul><li>Configuration only (customizations + MSI Installer) </li></ul></ul><ul><ul><li>CD package (CD Auto-run + IE8 + customizations) </li></ul></ul>
  12. 12. IE Administrators Kit <ul><li>Create custom, “light weight” branded packages </li></ul><ul><ul><li>Can be installed after browser installed (no need to reinstall the browser) </li></ul></ul><ul><ul><ul><li>Example settings: default search provider, home page(s), toolbars, ActiveX controls </li></ul></ul></ul><ul><ul><li>Users can still change settings after install </li></ul></ul>
  13. 13. IEAK License mode <ul><li>Independent Content Provider (ICP) </li></ul><ul><li>Independent Service Provider (ISP) </li></ul><ul><li>Corporate </li></ul>
  14. 14. Slipstream Installation <ul><li>IE7 Slipstreaming: </li></ul><ul><ul><li>Install OS </li></ul></ul><ul><ul><li>Install IE7 </li></ul></ul><ul><ul><li>Install updates </li></ul></ul><ul><ul><li>Recapture Image </li></ul></ul>
  15. 15. Slipstream Installation
  16. 16. Slipstream <ul><li>Use WAIK (Windows Automated Installation Kit) </li></ul><ul><ul><li>Tools </li></ul></ul><ul><ul><li>Documentation </li></ul></ul><ul><li>WAIK/Slipstream works on Vista/Server 2008 </li></ul>
  17. 17. IE8 Management Enhancements <ul><li>Group Policy </li></ul><ul><ul><li>New features can be configured or disabled (Accelerators, search providers, etc) </li></ul></ul><ul><ul><ul><li>Access to Developer Tools can be configured </li></ul></ul></ul><ul><ul><li>More than 100 new policies (bringing IE total to over 1,300 policy settings) </li></ul></ul>
  18. 18. Reduce Security Risks <ul><li>Enhanced Delete Browsing History </li></ul><ul><li>SmartScreen Filter </li></ul><ul><li>InPrivate Browsing </li></ul><ul><li>ActiveX Management </li></ul><ul><li>Domain Name Highlighting </li></ul>
  19. 19. Enhanced Delete Browsing History <ul><li>Enhanced delete: </li></ul><ul><ul><li>Option(s) to delete history for all web sites except those in favorites </li></ul></ul><ul><li>Environments that need enhanced delete: </li></ul><ul><ul><li>Sensitive data (defense/security/law enforcement) </li></ul></ul><ul><ul><li>Regulatory or compliance reasons </li></ul></ul>
  20. 20. Enhanced Delete
  21. 21. SmartScreen Filter <ul><li>Helps protect against deceptive web sites </li></ul><ul><li>IE 8 improvements: </li></ul><ul><ul><li>Better UI </li></ul></ul><ul><ul><li>Faster performance </li></ul></ul><ul><ul><li>New heuristics </li></ul></ul><ul><ul><li>Anti-malware support </li></ul></ul><ul><ul><li>Improved Group Policy Support </li></ul></ul>
  22. 22. InPrivate Browsing <ul><li>Not stored when InPrivate Browsing is activated: </li></ul><ul><ul><li>User’s browsing history </li></ul></ul><ul><ul><li>Temporary Internet files </li></ul></ul><ul><ul><li>Form data </li></ul></ul><ul><ul><li>Cookies </li></ul></ul><ul><ul><li>Usernames/passwords </li></ul></ul><ul><li>Not stored or retained by IE or on the system </li></ul>
  23. 23. InPrivate Browsing
  24. 24. InPrivate Filtering <ul><li>Blocks “3 rd party” sites/links after a set number of sites </li></ul><ul><ul><li>Ad networks </li></ul></ul><ul><ul><li>Stat counters </li></ul></ul><ul><li>Not tied to InPrivate Browsing </li></ul>
  25. 25. ActiveX Management <ul><li>ActiveX is a potential avenue of attack </li></ul><ul><li>Per-User ActiveX </li></ul><ul><ul><li>ActiveX control is installed only for that user </li></ul></ul><ul><li>Per-Site ActiveX </li></ul><ul><ul><li>An installed ActiveX control may be limited to only running on certain sites </li></ul></ul>
  26. 26. Domain Name Highlighting Domain Name highlighted: Secure site with Cert name displayed Unsafe site – determined by SmartScreen Filter
  27. 27. Other Security <ul><li>Application Protocol Prompt </li></ul><ul><ul><li>IE8 will now prompt before launching application protocols </li></ul></ul><ul><li>File Upload Control </li></ul>
  28. 28. Tab Isolation <ul><li>IE 7 </li></ul><ul><ul><li>If one tab crashed, entire browser crashed </li></ul></ul><ul><li>IE 8 </li></ul><ul><ul><li>If one tab crashes, only that tab crashes </li></ul></ul><ul><li>Crash Recovery </li></ul><ul><ul><li>Crashed tab will be restored </li></ul></ul><ul><ul><ul><li>Including data entered into most web forms </li></ul></ul></ul>
  29. 29. Enhanced Add-on Management <ul><li>Toolbars and other add-ons are common cause of crashes </li></ul><ul><li>Manage Add-ons: </li></ul><ul><ul><li>New close button on toolbars </li></ul></ul>
  30. 30. Enhanced Add-on Management
  31. 31. Enhanced Add-on Management <ul><li>New types of Add-ons to Manage </li></ul><ul><ul><li>Explorer Bars </li></ul></ul><ul><ul><li>Search Providers </li></ul></ul><ul><ul><li>Accelerators </li></ul></ul><ul><li>No Add-ons Mode </li></ul><ul><ul><li>Safe mode for troubleshooting </li></ul></ul><ul><ul><li>No 3 rd party code runs in this mode </li></ul></ul><ul><ul><li>Can disable problem controls </li></ul></ul><ul><ul><li>Can repair via Windows Update </li></ul></ul>
  32. 32. Enhanced Add-on Management <ul><li>Group Policy </li></ul><ul><ul><li>IT can disallow a particular add-on from being installed </li></ul></ul>
  33. 33. Diagnose Connection Problems Button <ul><li>May reduce the number of calls to the helpdesk </li></ul>
  34. 34. Redesigned “New Tab” Page
  35. 35. Smart Address Bar <ul><li>Smart Address Bar </li></ul><ul><ul><li>Typed addresses </li></ul></ul><ul><ul><li>Autocomplete suggestions </li></ul></ul><ul><ul><li>History </li></ul></ul><ul><ul><li>Favorites </li></ul></ul><ul><ul><li>Feeds </li></ul></ul><ul><ul><li>Keyboard shortcuts </li></ul></ul><ul><ul><li>Relevancy Sorting </li></ul></ul><ul><ul><li>Starting a search with ? in the bar </li></ul></ul><ul><ul><li>Files and folders </li></ul></ul>
  36. 36. Smart Address Bar <ul><li>Demonstration </li></ul>
  37. 37. Enhanced Tabbed Browsing <ul><li>Tab Groups </li></ul><ul><ul><li>New tab opened next to originating tab </li></ul></ul><ul><ul><li>Both are tabs are the same color </li></ul></ul><ul><ul><li>If a user closes a tab that’s part of group, then another tab from same group will be displayed </li></ul></ul><ul><ul><li>Right click to: </li></ul></ul><ul><ul><ul><li>Close tab </li></ul></ul></ul><ul><ul><ul><li>Close tab group </li></ul></ul></ul><ul><ul><ul><li>Remove tab from group </li></ul></ul></ul><ul><ul><ul><li>Refresh one or all tabs </li></ul></ul></ul><ul><ul><ul><li>Open a new tab </li></ul></ul></ul><ul><ul><ul><li>Reopen the last tab closed </li></ul></ul></ul><ul><ul><ul><li>See a list of all recently closed tabs and/or reopen them </li></ul></ul></ul>
  38. 38. Summary <ul><li>IE 8 = Enterprise Ready Browser </li></ul><ul><li>More Compatible, Deployable, Manageable </li></ul><ul><li>More Secure </li></ul><ul><li>More Productive for users </li></ul>
  39. 39. Further Resources <ul><li>“ Internet Explorer 8 Technology Overview for Enterprise and IT Professionals ” – January 2009 </li></ul><ul><li>Group Policy for IE8 </li></ul><ul><li>IE Application Compatibility VPCs </li></ul><ul><ul><li>IE6 XPSP3, IE7 VIS, IE7 XPSP3, IE8 XPSP3 </li></ul></ul><ul><li>My blog: http://geekswithblogs.net/kjones </li></ul><ul><ul><li>Or contact info: http://kdjones74.myplaxo.com/ </li></ul></ul>
  40. 40. Thank You

×