Solved

The java fiasco on older domains

Posted on 2013-01-12
3
320 Views
Last Modified: 2013-01-17
So given the blanket recomendation by our friends at homeland security to disable java is there a quick fix in the domain environment?
We predominantly have left java to do its thing, neither installing or uninstalling it.
We primarily supports sbs 2003 domains but have 2003 standard and 2008.
Browser enforcement has been left to client end users as the majority of our clientele have a mix of reasons they require particular browsers.
Is there a quick (preferably GPO type deployment) to blanket enforce browser policies (disable IE all together where possible)? Protect Firefox where possible, and create enough trust in chrome to deploy it?
Is there an easy policy that will initiate a removal of all java versions from machines unless they are necessary for client applications?
We primarily run one of the SEP security solutions where customers are willing.
0
Comment
Question by:RB_adcom
3 Comments
 
LVL 78

Assisted Solution

by:David Johnson, CD, MVP
David Johnson, CD, MVP earned 250 total points
ID: 38771298
This is not a browser problem per se but a problem with JAVA, either remove java or disable all java plugins. Therefor, (disable IE all together where possible)?, is throwing out the baby with the bathwater.

See my answer in http://www.experts-exchange.com/Software/Internet_Email/Web_Browsers/Q_27993283.html#a38771231 for a registry file to disable the plugin in Internet Explorer, Firefox users are left on their own

See http://nakedsecurity.sophos.com/how-to-disable-java-internet-explorer/ for instructions on how to disable in all browsers.
0
 
LVL 14

Accepted Solution

by:
BlueCompute earned 250 total points
ID: 38786956
Is there a quick (preferably GPO type deployment) to blanket enforce browser policies (disable IE all together where possible)? Protect Firefox where possible, and create enough trust in chrome to deploy it?

Thankfully these guys have worked through this for us: http://www.darkoperator.com/blog/2013/1/14/centralized-management-of-java-se-environment-using-gpo-redu.html

I think that only works for JRE7Update 10 though, I'm afraid
0
 

Author Closing Comment

by:RB_adcom
ID: 38788843
Not what I wanted to hear, but I wanted magic beans
0

Featured Post

NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
If you get continual lockouts after changing your Active Directory password, there are several possible reasons.  Two of the most common are using other devices to access your email and stored passwords in the credential manager of windows.
As developers, we are not limited to the functions provided by the VBA language. In addition, we can call the functions that are part of the Windows operating system. These functions are part of the Windows API (Application Programming Interface). U…
This Micro Tutorial will demonstrate how to add subdomains to your content reports. This can be very importing in having a site with multiple subdomains.

947 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now