Systems Management

I pushed 7u11 today to my XP and Win7 clients, and it's going smoothly as usual.  I'm getting the MSI from the EXE using the following trick:

Download and launch the Sun JRE Windows Offline Installion executable (.exe) file.
    Retrieve the ".msi" file from the LocalAppData folder (the user's Application Data folder). The LocalAppData folder will differ for each Windows platform.

Win7 - C:\Users\username\Appdata\LocalLow\Sun\Java\%version%

There's no need to install Java to get the Data1.cab and jre1.7.0_11.msi files, btw.  Once I have those two files, I update my regular batch file as follows:

taskkill /F /IM iexplorer.exe
taskkill /F /IM iexplore.exe
taskkill /F /IM firefox.exe
taskkill /F /IM chrome.exe
taskkill /F /IM javaw.exe
taskkill /F /IM jqs.exe
taskkill /F /IM jusched.exe
msiexec.exe /x {26A24AE4-039D-4CA4-87B4-2F86417009FF} /qn
taskkill /F /IM iexplorer.exe
taskkill /F /IM iexplore.exe
taskkill /F /IM firefox.exe
taskkill /F /IM chrome.exe
taskkill /F /IM javaw.exe
taskkill /F /IM jqs.exe
taskkill /F /IM jusched.exe
msiexec.exe /i jre1.7.0_11.msi /qn
exit

This kills any browser instances and related Java processes, uninstalls the last version (for me, it was 7u9) and then installs 7u11.  For the MI, I zip all 3 files, upload the zip, set the Installation Command to "Configure Manually", enter the batch file name, and it's ready to go.  Users do get an empty command prompt box for a couple seconds, but this hasn't caused any issues with deployment.

For what it's worth, I've been deploying using this setup for several versions without problems.

Hope that helps!

John

We generally extract the MSI, but I imagine that the .EXE install would be the same as what they used in this thread:

http://www.itninja.com/software/oracle/java-tm-7-update-2-64-bit/7-811

Here is a script that will remove the previous versions of Java and install Java 7 update 11!

http://www.itninja.com/blog/view/kace-install-java-7-update-11-using-a-script-removes-previous-versions

Yes I have it going out with via kbox script.  Today we are using a little help from users by using notifications. Includes notification to start/snooze and notification when done.  Will fail if IE is running; this is why we are using the online notification.

See the xml view:

<?xml version="1.0" encoding="utf-8" ?>
<kbots xmlns="http://kace.com/Kbots.xsd">
<kbot>

<config name="JRE 7.0.11 32bit Brower Install" type="policy" id="616" version="1358188629" description="Ready - Installs JRE 7.0.11 and kills the Java Updater - ws">

  <dependencies>
    <dependency name="/packages/kbots/616/jre-7u11-windows-i586.exe" checksum="fddd6bd553f5c3d34339be80711e0789"  />
  </dependencies>

  <execute disconnected="true" logged_off="true">
  </execute>

</config>

<compliance>

  <verify on_failure="break" attempts="1">

    <process_does_not_exist name="iexplore.exe" />

    <on_verify_success>
      <log_message type="activity" message="Installing JRE 7.0.11" />
      <launch_program path="$(KACE_DEPENDENCY_DIR)" program="jre-7u11-windows-i586.exe" wait="true" parms="/s /qn+ IEXPLORER=1 MOZILLA=1 JAVAUPDATE=0 REBOOT=Suppress" />
      <launch_program path="SYS" program="cmd.exe" wait="true" parms="/C &quot;rd /s /q &quot;$(KACE_DEPENDENCY_DIR)&quot;&quot;" />
      <log_message type="debug" message="Debuging:" />
    </on_verify_success>

    <on_verify_failure>

      <on_remediation_success>
      </on_remediation_success>

      <on_remediation_failure>
      </on_remediation_failure>

    </on_verify_failure>

  </verify>

  <verify on_failure="break" attempts="1">

    <registry_value_exists key="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" name="SunJavaUpdateSched" />

    <on_verify_success>
      <log_message type="activity" message="Removing SunJavaUpdateSched reg" />
      <delete_registry_value key="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" name="SunJavaUpdateSched" />
    </on_verify_success>

    <on_verify_failure>

      <on_remediation_success>
      </on_remediation_success>

      <on_remediation_failure>
      </on_remediation_failure>

    </on_verify_failure>

  </verify>

  <verify on_failure="break" attempts="1">

    <process_exists name="jusched.exe" />

    <on_verify_success>
      <log_message type="activity" message="Killing existing jusched PS" />
      <kill_process name="jusched.exe" />
    </on_verify_success>

    <on_verify_failure>

      <on_remediation_success>
      </on_remediation_success>

      <on_remediation_failure>
      </on_remediation_failure>

    </on_verify_failure>

  </verify>

</compliance>

</kbot>
</kbots>

Look at this link. It would seem that our command line options have changed again.

http://docs.oracle.com/javase/7/docs/webnotes/install/windows/jre-installer-options.html#running

here is the syntax.

<jre>.exe [/s] [INSTALLDIR=<drive>:\<JRE_install_path>] [STATIC=1] [WEB_JAVA=0/1] [WEB_JAVA_SECURITY_LEVEL=VH/H/M/L]

I found that extracting the MSI is the least tempermental way of getting the MI to work in our K1000, but it also has the highest failure rate. Java shows up in add/remove programs, but if you try to navigate out to any websites that use Java (IE or Firefox) they won't employ the plugin. So even though it will install easiest with the MSI, I recommend using the exe with the appropriate switches.

I'm having a problem with my SCCM push, I have done this successfully before and it worked using the extracted MSI and data file and the following command line:

msiexec /i jre1.7.0_11.msi /q

When I look at my report to see whats going on it looks good:

When I log into those machines that says it completed with success on, the Java panel in the control panel has the java icon (before I fixed my package program it was a broken icon) but when I click on the icon I get this:

I'm not sure if it actually is installed and the control panel is broken somehow or its not installed, is there logs in the C:\Windows\SysWOW64\CCM\Logs that can help me?

I need to get this out ASAP and Im pretty stuck right now. Any insight would be awesome, thanks!

I have a question as well - we have a huge variety of java versions on all machines (XP & 7). Is there a script that will uninstall any version of Java prior to 7u11? We have over 5,000 machines and it seems like this will be a hassle. I would love to get them all up to date with a managed install, but I need to be able to remove any previous version first I would imagine.