Solved

Disable Java on all workstations

Posted on 2013-01-11
2
737 Views
Last Modified: 2013-01-15
Due to the warning posted by Homeland Security I have been directed to disable JAVA on all Browser and on all Workstations. I have been looking through the internet and there are plenty of suggestions on how to disable automatic updating but as for disabling JAVA I have not found. Now on JAVA 7 update 10 you can go into the JAVA control panel on a workstation and disable but as for doing this via GPO I have not found a way.
0
Comment
Question by:tparus
2 Comments
 
LVL 16

Accepted Solution

by:
ThinkPaper earned 500 total points
ID: 38768853
Just went through this. You can modify group policy to disable javascript in IE on your workstations:

Computer Configuration>Administrative Template>Windows Components>Internet Explorer>Internet Control Panel>Security Page

For both:
Internet Zone
Restricted Zone

"Allow Active Scripting" - Disable

This would disable Javascript on everythign except websites that you explicitly defined as Local intranet or Trusted sites (which I hope you would already assume is safe).

** Just note that doing this will result in a lot of your userbase complaining about websites not working. Also - this would only apply for Internet Explorer, so if you are using other browsers (such as Firefox and Chrome) you're kind of SOL as you would have to find another solution to block it on those browsers.

The only other option is to do a mass uninstall of java which you should easily be able to do (remotely) with your software deployment app (or something like PsExec). But then again, this may cause a great deal of interruption for your user base. Ask your leadership how they wish to proceed before you start doing this (to cover your butt) - as it will cause A LOT of uproar when users notice things not working, since alot of stuff is javascript dependant.
0
 
LVL 18

Expert Comment

by:Sushil Sonawane
ID: 38768973
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this article, we will see the basic design consideration while designing a Multi-tenant web application in a simple manner. Though, many frameworks are available in the market to develop a multi - tenant application, but do they provide data, cod…
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

821 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question