In order to prevent your IE8 policy operating on computers that already have IE8, you need some way of scoping your policy so that such a population is outside of the scope of your policy.
You can do this by
Scoping the policy to a group which you are adding only objects without IE8
Use a WMI filter in the policy which checks for an entry that only IE8 machines have, if the item exists fail the policy
Its kinda an Achilles heel of doing GPO installs in my experience. The GPO looks to see if it installed the program yet or not, it doesn't care if the program is installed already. Its kinda a feature really since it lets you control exactly what application and version is installed.
Depending on how you handle things deploying IE8 through WSUS may work better since then Windows updates checks and compares the available downloads and only downloads what it needs.
In order to prevent your IE8 policy operating on computers that already have IE8, you need some way of scoping your policy so that such a population is outside of the scope of your policy.
You can do this by
:
Its kinda an Achilles heel of doing GPO installs in my experience. The GPO looks to see if it installed the program yet or not, it doesn't care if the program is installed already. Its kinda a feature really since it lets you control exactly what application and version is installed.
Depending on how you handle things deploying IE8 through WSUS may work better since then Windows updates checks and compares the available downloads and only downloads what it needs.