Solved

Is there a way to force all machines with java not to check for updates?

Posted on 2013-06-25
7
262 Views
Last Modified: 2013-07-19
We have SUS that pushes updates but I am wondering if there is a way to force the control panel settings on all machines to not check so they are not being checked as often and only by SUS?
0
Comment
Question by:bergquistcompany
  • 4
  • 3
7 Comments
 
LVL 3

Accepted Solution

by:
andrewjamesb earned 500 total points
Comment Utility
This can be done via Group Policy as described below

I have created the .adm template just to simply enable or disable Java auto Updater via a GPO. For all future searches, here is how to disable / enable Java Updates on a group of computers via a GPO. Just copy all of the text in between the lines below, paste the text into notepad, and save the file as a JavaAutoUpdater.adm, and then you can go into your GPMC and right click administrative templates (under computer), click add templates, and browse to the .adm file you just saved (one for java) and import it. You will also need to click on administrative templates, then click view, click filtering, and uncheck the "only show policy settings that can be fully managed".

                                   

                                 JAVA

 -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

CLASS MACHINE

CATEGORY !!Java

        POLICY !!Checkforupdatesatstart
 KEYNAME "SOFTWARE\JavaSoft\Java Update\Policy"
            EXPLAIN !!Checkforupdatesatstart_Help
                VALUENAME "EnableAutoUpdateCheck"
                    VALUEON NUMERIC 1
                    VALUEOFF NUMERIC 0
        END POLICY

        POLICY !!EnableJavaUpdater
            KEYNAME "SOFTWARE\JavaSoft\Java Update\Policy"
            EXPLAIN !!EnableJavaUpdater_Help
                VALUENAME "EnableJavaUpdate"
                    VALUEON NUMERIC 1
                    VALUEOFF NUMERIC 0
        END POLICY

END CATEGORY

[strings]
Java="Andy' Java Template"
EnableJavaUpdater="Enable Java Updater"
EnableJavaUpdater_Help="When set to Enabled, Java Updater can run and the 'Check for updates' option appears on the Help menu.  When set to Disabled, Java Updater cannot run and the 'Check for updates' option does not appear on the Help menu."
Checkforupdatesatstart="Check for updates at start (non-policy)"
Checkforupdatesatstart_Help=""When set to Enabled Java will check for updates at startup.  When set to Disabled Java will not check for updates at startup."
0
 

Author Comment

by:bergquistcompany
Comment Utility
Hello,

Copy under the --------------- to the "End Category" or [strings]?

From the .adm I am unclear which field is actually doing the disabling?  As I want to have it disabled.  So if I want to be able to get into Java in Control Panel but not have it check or run updates I'd set both to disable?
0
 
LVL 3

Expert Comment

by:andrewjamesb
Comment Utility
Hi Berg

You would need to copy below as it is and this will work for you as I have described above;

CLASS MACHINE

CATEGORY !!Java

        POLICY !!Checkforupdatesatstart
 KEYNAME "SOFTWARE\JavaSoft\Java Update\Policy"
            EXPLAIN !!Checkforupdatesatstart_Help
                VALUENAME "EnableAutoUpdateCheck"
                    VALUEON NUMERIC 1
                    VALUEOFF NUMERIC 0
        END POLICY

        POLICY !!EnableJavaUpdater
            KEYNAME "SOFTWARE\JavaSoft\Java Update\Policy"
            EXPLAIN !!EnableJavaUpdater_Help
                VALUENAME "EnableJavaUpdate"
                    VALUEON NUMERIC 1
                    VALUEOFF NUMERIC 0
        END POLICY

END CATEGORY

[strings]
Java="Andy' Java Template"
EnableJavaUpdater="Enable Java Updater"
EnableJavaUpdater_Help="When set to Enabled, Java Updater can run and the 'Check for updates' option appears on the Help menu.  When set to Disabled, Java Updater cannot run and the 'Check for updates' option does not appear on the Help menu."
Checkforupdatesatstart="Check for updates at start (non-policy)"
Checkforupdatesatstart_Help=""When set to Enabled Java will check for updates at startup.  When set to Disabled Java will not check for updates at startup."
0
Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

 

Author Comment

by:bergquistcompany
Comment Utility
Ok I'm going to try it and to confirm as is it will disable control panel java from checking and installing updates?  

Copy from Class Machine....to....startup" correct?
0
 

Author Comment

by:bergquistcompany
Comment Utility
ok added and check for updates at start is not configured nore is enable java updater
I should leave at not configured or set both to disabled?
0
 
LVL 3

Expert Comment

by:andrewjamesb
Comment Utility
Set both to disabled. Then you can update at a future date as you wish and when you want. Rather than the automatic installer running in the background

Hope this helps :-)
0
 

Author Closing Comment

by:bergquistcompany
Comment Utility
FABULOUS!  Thanks so much!
0

Featured Post

Better Security Awareness With Threat Intelligence

See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

Join & Write a Comment

Suggested Solutions

Introduction This article is the first of three articles that explain why and how the Experts Exchange QA Team does test automation for our web site. This article explains our test automation goals. Then rationale is given for the tools we use to a…
Introduction This article is the last of three articles that explain why and how the Experts Exchange QA Team does test automation for our web site. This article covers our test design approach and then goes through a simple test case example, how …
Viewers will learn about the regular for loop in Java and how to use it. Definition: Break the for loop down into 3 parts: Syntax when using for loops: Example using a for loop:
This tutorial will introduce the viewer to VisualVM for the Java platform application. This video explains an example program and covers the Overview, Monitor, and Heap Dump tabs.

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now