Java 7u21 and Recent Changes to Prompting Behavior?
So with the recent updates to Java we have seen an increasing aggressiveness in warning users of unsigned applications, or if their Java installation is outdated. I am curious if anybody has contended with this, and if there any avenues to configure the installation against this behavior.
In particular, the prompting that Java is outdated. It will then notify the user that they should download and install the update, something we prefer the K1 to do. This prompt is unwelcome, and is causing confusing for our users. Derp.
-
http://www.labareweb.com/java-1-7-auto-update-deployment-with-sccmmdt/ - tuckwell 11 years ago
Answers (3)
This should answer everyone's questions as to why there's new behavior.
http://isc.sans.edu/diary/Java+7+Update+21+is+available+-+Watch+for+Behaviour+Changes+!/15620
We are seeing this as well, but this happens on users profile created after the Java 7.11 install. And Any of the users that already had their profiles on the machiens are now getting the prompt.
Stop Java auto-update and java update prompt.
[HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Update\Policy]
"EnableJavaUpdate"=dword:00000000
[HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Update\Policy]
"NotifyDownload"=dword:00000000
[HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Update\Policy]
"NotifyInstall"=dword:00000000
[HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Update\Policy]
"UpdateSchedule"=dword:00000000
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C8FE2181-CAE7-49EE-9B04-DB7EB4DA544A}]
Comments:
-
In case of Java Certificates, export them and add them in the trusted root for all users.
Use
certutil.exe -addstore "TrustedPublisher" <xyz.cer>
Configure this in your package. - imavanurabanerjee 11 years ago-
Under [HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Update\Policy] what does UpdateMin do? Does that check for a Minimum version? - cloevin 11 years ago
