Solved

Deploy Java Security level change via Server 2008 R2 Group Policy for IE10.

Posted on 2014-01-16
7
3,957 Views
Last Modified: 2014-01-27
After installing the latest update for Java on our Xenapp 6.5 hosts (server 2008 R2), we are finding all Java sites now prompt users with the following error:

error
To resolve the issue, we change the Java security Level from High to Medium

java
The next time the user visits the Java site, they are prompted about if they want to run the application or not and the user can continue on and use the Java site.

I want to deploy this registry change to all users via group policy, however the setting I am assuming is the correct one is not changing anything

User Config\Windows Components/Internet Explorer/Internet Control Panel/Security Page/Internet Zone/Java Permissions - Enabled - Medium Safety



User Config\Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone/Java Permissions - Enabled - Medium Safety

I have also tried the same setting but under Computer config. Neither seem to work for me.
0
Comment
Question by:Howzatt
  • 3
  • 3
7 Comments
 
LVL 80

Accepted Solution

by:
David Johnson, CD, MVP earned 500 total points
ID: 39786514
It has nothing to do with internet explorer and is a JAVA setting.  A fairly complete solution is located here  This page explains the deployment configuration needed .. you will want to change the very high parameter to medium.
0
 

Author Comment

by:Howzatt
ID: 39787404
Thanks for that. It looks like a lot of work just to change that 1 setting. But I'll give it a go though.

Does the setting not deploy from the Java Permissions setting from GP on Svr 2008 R2 hosts anymore?
The GP setting does apply on our Server 2003 hosts.
0
 
LVL 80

Expert Comment

by:David Johnson, CD, MVP
ID: 39787481
Microsoft discontinued updating the msjvm a long time ago
0
Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

 

Author Comment

by:Howzatt
ID: 39798785
I haven't had a chance to test the solution yet. However I do have 1 question. If a user changes the security level manually from High to medium, why would it revert back to High when the users log back in the next day? Wouldn't that suggest there is a setting in place that is making it revert back?
0
 
LVL 80

Expert Comment

by:David Johnson, CD, MVP
ID: 39798901
It would imply that to me as well
0
 
LVL 23

Expert Comment

by:Dirk Kotte
ID: 39802292
the Java security Settings would revert back because the Settings are not synchronized with the roaming user profile.
The registry settings are not the only one. There are different config files at the user and device-level also.
I try to centralize the settings some hours … without success.
0
 

Author Closing Comment

by:Howzatt
ID: 39813947
Worked perfect
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…
Viewers will learn how to properly install Eclipse with the necessary JDK, and will take a look at an introductory Java program. Download Eclipse installation zip file: Extract files from zip file: Download and install JDK 8: Open Eclipse and …

680 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question