I am using the IEAK to create an install package for my company so that I can deploy IE11 before the deadline.  We currently have IE10 installed across the board - fully patched.

In the IEAK, there is a limit of 10 custom components you can add to the package.  There are 9 prerequisites.  There are 16 (as of this writing) patches/security updates.  

The IE install is around 100MB + 40MB for the prerequisites.  The updates that should be installed after this total around 600MB.  The question is:  how are enterprises supposed to deploy IE11 fully patched when the limit in the tool to create a deployment package is 10 items and I need at least 16?  Assume I could deploy the prerequisites beforehand.  

We also use SCCM to deploy updates.  I would like to deploy IE11 and reboot 1 time.  (We don't auto-reboot, but that really doesn't matter for deployment)  As it stands now, I would have to run the IE11 install 1 night, reboot the machine after installing.  Then the next night watch all of the machines in our company download 600MB each of patches, and install them and wait for a reboot for the IE versions to be secured and up to date.  

Two ways to avoid this would be for Microsoft to 1) allow more (like unlimited) items in the custom components list of the IEAK or 2) create fully patched versions of IE for release (probably not possible due to the OS hooks, but still)  I would like to be able to package this and deploy - not package and then wait for everyone to update.

Am I missing an obvious solution here?

So it is not possible?  I am forced to deploy an unsecure application first - then patch it afterwards, yes?

Hi Spencer ,

Base on my knowledge, in IEAK, components does not equal to updates, you don't need to consider adding all updates to the deployment package.

As you mentioned, you can deploy an application first ,and patch it afterwards.

Best regards,