IE9 & Java Issue
This is my current setup:
SCCM2 w/ AD services
Over 6000+ Windows 7 x64 Clients
So here's my dilemma. I have successfully built a package for Java (JRE) 6.0 R26 and it is successfully installing to client machines.
We use a local intranet site which requires Java to run on IE9. The issue is that at the initial startup of the intranet page, there is a dialogue that pops up at the bottom stating:
"This webpage wants to run the following add-on: 'Java(TM SE Runtime Environment 6 Update 26' from 'Sun Microsystems, Inc.'. [ Allow ] <=Button next to it.
Now, I can click Allow and everything is dandy but we need to streamline this as most of the end users are beyond illiterate and require very special attention. Is there a simple way to deploy this change without GPO. Can I possibly do a registry change to add an exemption for IE9 for this particular addon? I have searched for the past 3 hours on google and many other forums yet to no avail.
Thank you.
SCCM2 w/ AD services
Over 6000+ Windows 7 x64 Clients
So here's my dilemma. I have successfully built a package for Java (JRE) 6.0 R26 and it is successfully installing to client machines.
We use a local intranet site which requires Java to run on IE9. The issue is that at the initial startup of the intranet page, there is a dialogue that pops up at the bottom stating:
"This webpage wants to run the following add-on: 'Java(TM SE Runtime Environment 6 Update 26' from 'Sun Microsystems, Inc.'. [ Allow ] <=Button next to it.
Now, I can click Allow and everything is dandy but we need to streamline this as most of the end users are beyond illiterate and require very special attention. Is there a simple way to deploy this change without GPO. Can I possibly do a registry change to add an exemption for IE9 for this particular addon? I have searched for the past 3 hours on google and many other forums yet to no avail.
Thank you.
0 Comments
[ + ] Show comments
Answers (2)
Please log in to answer
Posted by:
Xonos
13 years ago
As always, I feel like an idiot. :)
IE9 requires each site to be in the trusted sites list if in a locked down environment. On my end, I let our Group Policy guy handle adding sites to the trusted locations section and everything worked fine after that. No prompt to "allow" or anything like that. I did it through Group Policy as that is much better than deploying an MSI or REG hack to import the changes per user.
For those of you needing to do this manually through sccm or any other deployment - I have found where trusted locations are stored and how the entry should be placed.
Add a new key to the following location and name it after your site (minus http/https/ftp/etc)
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\
So after you add the key to \Domains\, it should look like the following examples:
ex. 1 -HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\your_site.com
ex. 2 -HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\10.3.55.150/folder/site/
ex. 3 -HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\microsoft.com
Now, under each of these keys you will need to insert the type of connection that will be used for these locations. I recommend both http and https but you can add other extensions such as ftp, rstp, qts, etc...
So add the following under the your_site.com key ->
Dword - http (hex) Value = 2
Dword - https (hex) Value = 2
If you need to add an ftp, it would look like this..
Dword - ftp (hex) Value = 2
So the layout should be like the following:
+HKCU\
+Software\
+Microsoft\
+Windows\
+CurrentVersion\
+Internet Settings\
+ZoneMap\
+Domains\
+your_site.com
- https
- http
I know I explained this in a silly manner but I just wanted to get this across so that no one wasted as much time as I have on simple stuff that shouldn't take long. I am still learning after all.
IE9 requires each site to be in the trusted sites list if in a locked down environment. On my end, I let our Group Policy guy handle adding sites to the trusted locations section and everything worked fine after that. No prompt to "allow" or anything like that. I did it through Group Policy as that is much better than deploying an MSI or REG hack to import the changes per user.
For those of you needing to do this manually through sccm or any other deployment - I have found where trusted locations are stored and how the entry should be placed.
Add a new key to the following location and name it after your site (minus http/https/ftp/etc)
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\
So after you add the key to \Domains\, it should look like the following examples:
ex. 1 -HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\your_site.com
ex. 2 -HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\10.3.55.150/folder/site/
ex. 3 -HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\microsoft.com
Now, under each of these keys you will need to insert the type of connection that will be used for these locations. I recommend both http and https but you can add other extensions such as ftp, rstp, qts, etc...
So add the following under the your_site.com key ->
Dword - http (hex) Value = 2
Dword - https (hex) Value = 2
If you need to add an ftp, it would look like this..
Dword - ftp (hex) Value = 2
So the layout should be like the following:
+HKCU\
+Software\
+Microsoft\
+Windows\
+CurrentVersion\
+Internet Settings\
+ZoneMap\
+Domains\
+your_site.com
- https
- http
I know I explained this in a silly manner but I just wanted to get this across so that no one wasted as much time as I have on simple stuff that shouldn't take long. I am still learning after all.
Posted by:
jeniferjohn
13 years ago
Try the following (assuming you have Adobe Flash Player v10.2 installed): • Restart your computer.• Open Internet Options (located in the Control Panel).• Click on the Advanced tab.• Click on the Reset button, place a check next to Delete Personal Settings and then click Reset.• Launch IE9 and Adobe Flash Player will be properly enabled.[/align]
Rating comments in this legacy AppDeploy message board thread won't reorder them,
so that the conversation will remain readable.
so that the conversation will remain readable.