Internet Explorer

8for Administrators

Introduction

Kelly Jones• Senior Consultant, Sogeti USA

• Kelly.Jones@us.sogeti.com • 10+ years industry experience

Agenda

• Enterprise Ready• Reduced Security Risks• Improved Productivity

Enterprise Ready

Compatibility

Deployment

Management

Compatibility

Compatibility View• Compatibility View Button

• Settings are remembered per site

Compatibility View Settings

Tools Compatibility View Settings window

• Add/Remove sites

• Intranet Zone sites are in compatibility view by default

Compatibility View Notes

Notes

• Switching in and out of compatibility view doesn’t require a browser restart

• Compatibility View settings can be controlled through Group Policy

Application Compatibility Toolkit (ACT)

IE8 additions to ACT• Cross-Site Scripting Filter• Standards Mode• Windows Reuse Navigation Restriction• MIME restrictions• File name restriction• Control Block• DEP/NX• ActiveX control blocking• Intranet integrity• Codepage sniffing• Web Proxy handling• Ajax navigation

Deployment Options

Standalone installation• Active Directory• SCCM (System Center Configuration Manager)• WSUS (Windows Server Update Services)

Slipstream• IE8 added to OS image

Standalone Installation

Packages

• Use the publically available package downloaded from Microsoft

- or –

• Create custom package

Custom IE8 Deployment Packages

Use IEAK (IE Administration Kit) to create:

• Full package (IE8 + customizations + MSI Installer)

• Configuration only (customizations + MSI Installer)

• CD package (CD Auto-run + IE8 + customizations)

IE Administrators Kit

Create custom, “light weight” branded packages• Can be installed after browser installed (no need to reinstall

the browser)• Example settings: default search provider, home page(s),

toolbars, ActiveX controls

• Users can still change settings after install

IEAK License mode

Independent Content Provider (ICP)

Independent Service Provider (ISP)

Corporate

Slipstream Installation

IE7 Slipstreaming:• Install OS• Install IE7• Install updates• Recapture Image

Slipstream Installation

Slipstream

Use WAIK (Windows Automated Installation Kit)• Tools• Documentation

WAIK/Slipstream works on Vista/Server 2008

IE8 Management Enhancements

Group Policy• New features can be configured or disabled (Accelerators,

search providers, etc)• Access to Developer Tools can be configured

• More than 100 new policies (bringing IE total to over 1,300 policy settings)

Reduce Security Risks

Enhanced Delete Browsing History

SmartScreen Filter

InPrivate Browsing

ActiveX Management

Domain Name Highlighting

Enhanced Delete Browsing History

Enhanced delete:• Option(s) to delete history for all web sites except those in

favorites

Environments that need enhanced delete:• Sensitive data (defense/security/law enforcement)• Regulatory or compliance reasons

Enhanced Delete

SmartScreen Filter

Helps protect against deceptive web sites

IE 8 improvements:• Better UI• Faster performance• New heuristics• Anti-malware support• Improved Group Policy

Support

InPrivate Browsing

Not stored when InPrivate Browsing is activated:• User’s browsing history• Temporary Internet files• Form data• Cookies• Usernames/passwords

Not stored or retained by IE or on the system

InPrivate Browsing

InPrivate Filtering

Blocks “3rd party” sites/links after a set number of sites• Ad networks• Stat counters

Not tied to InPrivate Browsing

ActiveX Management

ActiveX is a potential avenue of attack

Per-User ActiveX• ActiveX control is installed only for that user

Per-Site ActiveX• An installed ActiveX control may be limited to only running on

certain sites

Domain Name Highlighting

Domain Name highlighted:

Secure site with Cert name displayed

Unsafe site – determined by SmartScreen Filter

Other Security

Application Protocol Prompt• IE8 will now prompt before

launching application protocols

File Upload Control

Tab Isolation

IE 7• If one tab crashed, entire browser crashed

IE 8• If one tab crashes, only that tab crashes

Crash Recovery• Crashed tab will be restored

• Including data entered into most web forms

Enhanced Add-on Management

Toolbars and other add-ons are common cause of crashes

Manage Add-ons:• New close button on toolbars

Enhanced Add-on Management

Enhanced Add-on Management

New types of Add-ons to Manage• Explorer Bars• Search Providers• Accelerators

No Add-ons Mode • Safe mode for troubleshooting• No 3rd party code runs in this mode• Can disable problem controls• Can repair via Windows Update

Enhanced Add-on Management

Group Policy• IT can disallow a particular add-on from being installed

Diagnose Connection Problems Button

May reduce the number of calls to the helpdesk

Local Touch—Global Reach

Redesigned “New Tab” Page

Local Touch—Global Reach

Smart Address Bar

Smart Address Bar

• Typed addresses• Autocomplete suggestions• History• Favorites• Feeds• Keyboard shortcuts• Relevancy Sorting• Starting a search with ? in the bar• Files and folders

Local Touch—Global Reach

Smart Address Bar

Demonstration

Local Touch—Global Reach

Enhanced Tabbed Browsing

Tab Groups

• New tab opened next to originating tab• Both are tabs are the same color• If a user closes a tab that’s part of group, then another tab

from same group will be displayed• Right click to:

• Close tab• Close tab group• Remove tab from group• Refresh one or all tabs• Open a new tab• Reopen the last tab closed• See a list of all recently closed tabs and/or reopen them

Summary

IE 8 = Enterprise Ready Browser

More Compatible, Deployable, Manageable

More Secure

More Productive for users

Further Resources

“Internet Explorer 8 Technology Overview for Enterprise and IT Professionals” – January 2009

Group Policy for IE8

IE Application Compatibility VPCs• IE6 XPSP3, IE7 VIS, IE7 XPSP3, IE8 XPSP3

My blog: http://geekswithblogs.net/kjones • Or contact info: http://kdjones74.myplaxo.com/

Thank You