Friday, July 22, 2011

Registry-based Silverlight policy settings

The Silverlight control’s automatic update mechanism is independent of both the Windows Update and Microsoft Update mechanisms. Silverlight can be configured to use one of three automatic update modes:

1) Auto Updates - Automatically detects, downloads, and installs updates. This is the default setting after an install. The client will attempt to request files from Microsoft at most one time per day to detect if there is a newer version of the Silverlight client. If there is a newer version, it will automatically download and install the update without any user intervention required.

2) Prompted Updates - Detects when an update is available and prompts if you would like to download and install the update. This uses the same detection location and schedule as the Auto Updates option.

3) No Updates - Does not check for or automatically download updates. This option should be used in most corporate environments if you are using SMS, software update services (SUS), or another enterprise software management solution.

If using the Silverlight updater you will need to give the client computer access to the following domains:

· go.microsoft.com

· silverlight.dlservice.microsoft.com

· rs.update.microsoft.com

· slupdate.dlservice.microsoft.com

· www.microsoft.com

These settings are available in the custom ADM or ADMX file you created as referenced above. The registry setting that the administrative template files contain is:

Key path: HKEY_LOCAL_MACHINE\Software\Microsoft\Silverlight\

Value Name: UpdateMode

Value Type: DWORD

Valid Values:

Auto Updates 0x00000000

Prompted Updates 0x00000001

No Updates 0x00000002

You can locate this setting in the following policy path for your GPOs:

Category

Description

Computer Configuration\Administrative Templates\Silverlight

Contains settings to enable or disable standard Silverlight configurations.

No comments:

Post a Comment