Solved

Disable Java on all workstations

Posted on 2013-01-11
2
741 Views
Last Modified: 2013-01-15
Due to the warning posted by Homeland Security I have been directed to disable JAVA on all Browser and on all Workstations. I have been looking through the internet and there are plenty of suggestions on how to disable automatic updating but as for disabling JAVA I have not found. Now on JAVA 7 update 10 you can go into the JAVA control panel on a workstation and disable but as for doing this via GPO I have not found a way.
0
Comment
Question by:tparus
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 16

Accepted Solution

by:
ThinkPaper earned 500 total points
ID: 38768853
Just went through this. You can modify group policy to disable javascript in IE on your workstations:

Computer Configuration>Administrative Template>Windows Components>Internet Explorer>Internet Control Panel>Security Page

For both:
Internet Zone
Restricted Zone

"Allow Active Scripting" - Disable

This would disable Javascript on everythign except websites that you explicitly defined as Local intranet or Trusted sites (which I hope you would already assume is safe).

** Just note that doing this will result in a lot of your userbase complaining about websites not working. Also - this would only apply for Internet Explorer, so if you are using other browsers (such as Firefox and Chrome) you're kind of SOL as you would have to find another solution to block it on those browsers.

The only other option is to do a mass uninstall of java which you should easily be able to do (remotely) with your software deployment app (or something like PsExec). But then again, this may cause a great deal of interruption for your user base. Ask your leadership how they wish to proceed before you start doing this (to cover your butt) - as it will cause A LOT of uproar when users notice things not working, since alot of stuff is javascript dependant.
0
 
LVL 18

Expert Comment

by:Sushil Sonawane
ID: 38768973
0

Featured Post

Online Training Solution

Drastically shorten your training time with WalkMe's advanced online training solution that Guides your trainees to action. Forget about retraining and skyrocket knowledge retention rates.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Active Directory security has been a hot topic of late, and for good reason. With 90% of the world’s organization using this system to manage access to all parts of their IT infrastructure, knowing how to protect against threats and keep vulnerabil…
Uncontrolled local administrators groups within any organization pose a huge security risk. Because these groups are locally managed it becomes difficult to audit and maintain them.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

696 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question