[2 days left] What’s wrong with your cloud strategy? Learn why multicloud solutions matter with Nimble Storage.Register Now

x
?
Solved

Disable Java on all workstations

Posted on 2013-01-11
2
Medium Priority
?
749 Views
Last Modified: 2013-01-15
Due to the warning posted by Homeland Security I have been directed to disable JAVA on all Browser and on all Workstations. I have been looking through the internet and there are plenty of suggestions on how to disable automatic updating but as for disabling JAVA I have not found. Now on JAVA 7 update 10 you can go into the JAVA control panel on a workstation and disable but as for doing this via GPO I have not found a way.
0
Comment
Question by:tparus
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 16

Accepted Solution

by:
ThinkPaper earned 2000 total points
ID: 38768853
Just went through this. You can modify group policy to disable javascript in IE on your workstations:

Computer Configuration>Administrative Template>Windows Components>Internet Explorer>Internet Control Panel>Security Page

For both:
Internet Zone
Restricted Zone

"Allow Active Scripting" - Disable

This would disable Javascript on everythign except websites that you explicitly defined as Local intranet or Trusted sites (which I hope you would already assume is safe).

** Just note that doing this will result in a lot of your userbase complaining about websites not working. Also - this would only apply for Internet Explorer, so if you are using other browsers (such as Firefox and Chrome) you're kind of SOL as you would have to find another solution to block it on those browsers.

The only other option is to do a mass uninstall of java which you should easily be able to do (remotely) with your software deployment app (or something like PsExec). But then again, this may cause a great deal of interruption for your user base. Ask your leadership how they wish to proceed before you start doing this (to cover your butt) - as it will cause A LOT of uproar when users notice things not working, since alot of stuff is javascript dependant.
0
 
LVL 18

Expert Comment

by:Sushil Sonawane
ID: 38768973
0

Featured Post

Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A hard and fast method for reducing Active Directory Administrators members.
Microsoft Office 365 is a subscriptions based service which includes services like Exchange Online and Skype for business Online. These services integrate with Microsoft's online version of Active Directory called Azure Active Directory.
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…

656 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question