Solved

Network Users perform JAVA and ADOBE updates

Posted on 2011-03-02
5
361 Views
Last Modified: 2012-05-11
We have a Active Directory ,domain using 2003 server. We have installed new dell computers running on windows 7. Everyday we have users calling for us IT to come by and put our credentials in to allow JAVA  or Adobe updates to complete.
What is lowest level to allow users to perform their own updates.
0
Comment
Question by:BSAS_ITGuy
  • 2
  • 2
5 Comments
 
LVL 47

Accepted Solution

by:
for_yan earned 250 total points
ID: 35019268


This is how you can install Java without admin priivileges:

http://www.ehow.com/how_6012601_install-java-admin-privileges.html

Probably that will be of little use to yur users.

In normal situation I believe you need to have local admin privileges
to install Java (I'm sure it writes to registry, etc.).
0
 
LVL 1

Author Comment

by:BSAS_ITGuy
ID: 35019468
Yes these are all power users, they do not have admin rights. I was surprised that a power user couldn't install updates.
0
 
LVL 47

Assisted Solution

by:for_yan
for_yan earned 250 total points
ID: 35019534
Perhaps this is related to your issue:


http://answers.microsoft.com/en-us/windows/forum/windows_vista-windows_programs/java-update-problem/ef703cb4-44ad-4f61-9dbe-3c46cadd42e3

on XP I never had any problems with admin privileges on Java installation
0
 
LVL 1

Author Closing Comment

by:BSAS_ITGuy
ID: 35435522
Not fixed, I guess it is not a big enogh annoyance for the knowledgebase to have anything on this.
0
 

Expert Comment

by:sicm
ID: 37604106
This is how we solved this issue for

Java
we took the recommended: http://sgwindowsgroup.org/blogs/panda/archive/2010/05/14/disable-java-auto-update-through-gpo.aspx

1. We have a Server 2008 environment so we used the group policy preference option at the bottom of the page. We did not use a VB script.
2. We went into Group Policy editor
3. Made a new Group Policy and called it "Disable Java Auto updates"
4. Then we chose to make this group poilcy apply to the "Computer Configuration"
5. Expand the "Preferences Tree"
6. Click on "Registry" We are going to add a registry key to the computer and push it out through group policy.
7. Right click on "Registry"
8. Go to New> Registry Item
9. For those of you who want to make this apply to x64 bit users as well as x32 you do not have to create 2 registry edits to be pushed out through group policy. Even though x64 bit has "Wow6432Node" in its registry for x64 bit programs Java is a x32 bit program and does not use this registry.
10 .The x32 system the Key Path is "Software\JavaSoft\Java Update\Policy" The panda blog has a typo so use the path I just provided. The value name we set was "EnableJavaUpdate", The Value type is REG_DWORD, and the Value is 0 because we want to turn it off. I have attached pictures if you want to look at them.
11. Click okay and get out of the policy management editor
12. Now just apply this policy to the Organization Unit (OU) that you want this policy to apply to.
13. Get on a computer that is located in the OU you applied the policy
14. Open a Command Prompt as administraor
15. Do a gpupdate /force
16. Go into the registry (regedit) and check the path Software\JavaSoft\Java Update\Policy and make sure the policy is set to 0. Another way you can check is go into the java applet in the control panel and the updates tab will be gone.
17. You should not get any more java updates

For Adobe we did not use any of the suggested.
We used : http://www.grouppolicy.biz/2010/06/updated-how-to-make-adobe-reader-more-secure-using-group-policy/

This is for x32 bit

Our first steps was finding the registry key that would disable the auto update function.
1. The registry path that dsiablesthe auto update for adobe is HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Adobe ARM\1.0\ARM
2. Edit the registry of iCheckReader
3. Change the Value to 0
4.This would change the updater for adobe.
5. To verify open adobe
     - hit edit
     - hit preferences
     - The last option should be updater
     -The value 0 will change it so auto update on adobe is turned off.
6. Your going to want to set this back to 3 so that updates are turned on so that you know your group policy which we will be stting up is turned on
7. Now that we know the registry that controls adobe auto updater we can make a  Group Policy for disabling adobe updates.

Creating Group Policy
We have a Server 2008 environment so we used the group policy preference option
8. We went into Group Policy editor
9. Made a new Group Policy and called it "Adobe Reader X- Disable Update"
10. Then we chose to make this group poilcy apply to the "Computer Configuration"
11. Expand the "Preferences Tree"
12. Click on "Registry" We are going to add a registry key to the computer and push it out through group policy.
13. Right click on "Registry"
14. Go to New> Registry Item
15. The x32 system the Key Path is "SOFTWARE\Adobe\Adobe ARM\1.0\ARM" The value name we set was "iCheckReader", The Value type is REG_DWORD, and the Value is 0 because we want to turn it off. I have attached pictures if you want to look at them.
16. Go to the Common tab and check the Item-level targeting check box and click the "Targeting" box
17. Set Product to Windows 7, Edition to "Buisness"
18. Click okay and get out of the policy management editor
19. Now just apply this policy to the Organization Unit (OU) that you want this policy to apply to.
20. Get on a computer that is located in the OU you applied the policy
21. Open a Command Prompt as administraor
22. Do a gpupdate /force


This is for x64 bit
1. For x64 it is virtually the same except the x64 bit key is HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Adobe\Adobe ARM\1.0\ARM\iCheckReader
2. Follow 8 through 14 to create a new GPO for iCheckReader that will set it to 0. Which will turn off adobe updates
3. You will have to go to the "common" tab again and target the buisness x64 bit.
4. Now just apply this policy to the Organization Unit (OU) that you want this policy to apply to.
5. Get on a computer that is located in the OU you applied the policy
6. Open a Command Prompt as administraor
7. Do a gpupdate /force
8.If it worked you can check the registry located at HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Adobe\Adobe ARM\1.0\ARM\iCheckReader should be set to 0
0

Featured Post

How to improve team productivity

Quip adds documents, spreadsheets, and tasklists to your Slack experience
- Elevate ideas to Quip docs
- Share Quip docs in Slack
- Get notified of changes to your docs
- Available on iOS/Android/Desktop/Web
- Online/Offline

Join & Write a Comment

The Adobe PDF proprietary file format is recognized as secure and formulated. But these PDF files are also prone to corruption and any external threat like virus attacks, improper storage can hit PDF file integrity.This type of damages can make cruc…
Java functions are among the best things for programmers to work with as Java sites can be very easy to read and prepare. Java especially simplifies many processes in the coding industry as it helps integrate many forms of technology and different d…
Viewers will learn about the regular for loop in Java and how to use it. Definition: Break the for loop down into 3 parts: Syntax when using for loops: Example using a for loop:
Viewers will learn how to properly install Eclipse with the necessary JDK, and will take a look at an introductory Java program. Download Eclipse installation zip file: Extract files from zip file: Download and install JDK 8: Open Eclipse and …

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now