Can I create a Group policy to enable Adobe and Java updates

Can I create a GPO to enable Adobe and Java updates? I've found some articles on disabling it and another where I'd have to create a new MSI file every time a new update comes out. I just want to have it set to auto update from a GP is that possible
Axis52401Security AnalystAsked:
Who is Participating?
stu29Connect With a Mentor Commented:
I would not be letting Java and Adobe decide when they run updates on company computers (a little buggy when first released and no testing).  Try actually deploying the versions you want .. when you want.  See a Java example below
You should be able to.  If it were me, I'd fine the registry settings that control these behaviors as you'd like and push them out via GPO.


By design, Java Update is enabled by default, so end users would be able to get the latest greatest update proactively. For companies that want to disable Java Update on all systems, they may roll out the following registry key:


This will effectively disable the update check in Java Update. 

Open in new window

Since you don't want to disable it, I'm guessing you'll probably set it to dword:00000001, but you can check that registry setting from a machine that has it enabled already to see the proper value.

Adobe (assuming flash):

Adobe doesn't appear to do it through registry, so check out that link for suggestions on managing it.
Reading the adobe solution, I'd probably roll that out via a GPO that attaches itself to a script (vbs most likely).  The script could do both the registry and the file copy as the link describes.  You'll want to include a detection of the operating system in the script so you get the file into the right location.
Easily Design & Build Your Next Website

Squarespace’s all-in-one platform gives you everything you need to express yourself creatively online, whether it is with a domain, website, or online store. Get started with your free trial today, and when ready, take 10% off your first purchase with offer code 'EXPERTS'.

Axis52401Security AnalystAuthor Commented:
   That seems to work on the workstations, they want this to work on our servers as well. I checked and the servers don't have that Registry key even though they do have java installed.
David Johnson, CD, MVPOwnerCommented:
I'm a bit confused.. Where and how do you want them to update?  If you want to control the updates then use group policy to disable their normal automatic updating and then provide the updates yourself. This is what you've seen before.

If you want to enforce the automatic updating then you could change the example group policies to where it says disable automatic update = 1 to change it to a 0 or the reverse.  The problem being that it usually requires elevation of privileges to update these. Especially for Java maybe not for adobe flash, it all depends upon how locked down your systems are.

This video shows you what is involved and is pretty straight forward.
I'd be a little weary about auto updating on a server.  Even windows updates I don't allow to install automatically on a server (maybe that's me being too cautious...).  Anyways, you may be running a 64bit OS on your server.  Check the wow6432node:
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.