Can I create a Group policy to enable Adobe and Java updates

Can I create a GPO to enable Adobe and Java updates? I've found some articles on disabling it and another where I'd have to create a new MSI file every time a new update comes out. I just want to have it set to auto update from a GP is that possible
LVL 2
Axis52401Security AnalystAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

piattndCommented:
You should be able to.  If it were me, I'd fine the registry settings that control these behaviors as you'd like and push them out via GPO.

Java:
https://www.java.net//node/672701

By design, Java Update is enabled by default, so end users would be able to get the latest greatest update proactively. For companies that want to disable Java Update on all systems, they may roll out the following registry key:

[HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Update\Policy]
 "EnableAutoUpdateCheck"=dword:00000000

This will effectively disable the update check in Java Update. 

Open in new window


Since you don't want to disable it, I'm guessing you'll probably set it to dword:00000001, but you can check that registry setting from a machine that has it enabled already to see the proper value.

Adobe (assuming flash):
http://helpx.adobe.com/flash-player/kb/administration-configure-auto-update-notification.html

Adobe doesn't appear to do it through registry, so check out that link for suggestions on managing it.
0
piattndCommented:
Reading the adobe solution, I'd probably roll that out via a GPO that attaches itself to a script (vbs most likely).  The script could do both the registry and the file copy as the link describes.  You'll want to include a detection of the operating system in the script so you get the file into the right location.
0
Axis52401Security AnalystAuthor Commented:
piattnd,
   That seems to work on the workstations, they want this to work on our servers as well. I checked and the servers don't have that Registry key even though they do have java installed.
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

David Johnson, CD, MVPOwnerCommented:
I'm a bit confused.. Where and how do you want them to update?  If you want to control the updates then use group policy to disable their normal automatic updating and then provide the updates yourself. This is what you've seen before.

If you want to enforce the automatic updating then you could change the example group policies to where it says disable automatic update = 1 to change it to a 0 or the reverse.  The problem being that it usually requires elevation of privileges to update these. Especially for Java maybe not for adobe flash, it all depends upon how locked down your systems are.

This video shows you what is involved and is pretty straight forward.
http://www.youtube.com/watch?v=trG7rFAUcvo
0
piattndCommented:
I'd be a little weary about auto updating on a server.  Even windows updates I don't allow to install automatically on a server (maybe that's me being too cautious...).  Anyways, you may be running a 64bit OS on your server.  Check the wow6432node:

http://www.interworks.com/blogs/dholm/2010/05/18/disabling-java-automatic-updates-terminal-server-and-64-bit-registry-redirect
0
stu29Commented:
I would not be letting Java and Adobe decide when they run updates on company computers (a little buggy when first released and no testing).  Try actually deploying the versions you want .. when you want.  See a Java example below

http://community.spiceworks.com/how_to/show/22997-use-a-batch-file-and-group-policy-to-cleanly-update-java
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.