Solved

Deploy Java Security level change via Server 2008 R2 Group Policy for IE10.

Posted on 2014-01-16
7
3,917 Views
Last Modified: 2014-01-27
After installing the latest update for Java on our Xenapp 6.5 hosts (server 2008 R2), we are finding all Java sites now prompt users with the following error:

error
To resolve the issue, we change the Java security Level from High to Medium

java
The next time the user visits the Java site, they are prompted about if they want to run the application or not and the user can continue on and use the Java site.

I want to deploy this registry change to all users via group policy, however the setting I am assuming is the correct one is not changing anything

User Config\Windows Components/Internet Explorer/Internet Control Panel/Security Page/Internet Zone/Java Permissions - Enabled - Medium Safety

&

User Config\Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone/Java Permissions - Enabled - Medium Safety

I have also tried the same setting but under Computer config. Neither seem to work for me.
0
Comment
Question by:Howzatt
  • 3
  • 3
7 Comments
 
LVL 78

Accepted Solution

by:
David Johnson, CD, MVP earned 500 total points
ID: 39786514
It has nothing to do with internet explorer and is a JAVA setting.  A fairly complete solution is located here  This page explains the deployment configuration needed .. you will want to change the very high parameter to medium.
0
 

Author Comment

by:Howzatt
ID: 39787404
Thanks for that. It looks like a lot of work just to change that 1 setting. But I'll give it a go though.

Does the setting not deploy from the Java Permissions setting from GP on Svr 2008 R2 hosts anymore?
The GP setting does apply on our Server 2003 hosts.
0
 
LVL 78

Expert Comment

by:David Johnson, CD, MVP
ID: 39787481
Microsoft discontinued updating the msjvm a long time ago
0
Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

 

Author Comment

by:Howzatt
ID: 39798785
I haven't had a chance to test the solution yet. However I do have 1 question. If a user changes the security level manually from High to medium, why would it revert back to High when the users log back in the next day? Wouldn't that suggest there is a setting in place that is making it revert back?
0
 
LVL 78

Expert Comment

by:David Johnson, CD, MVP
ID: 39798901
It would imply that to me as well
0
 
LVL 23

Expert Comment

by:Dirk Kotte
ID: 39802292
the Java security Settings would revert back because the Settings are not synchronized with the roaming user profile.
The registry settings are not the only one. There are different config files at the user and device-level also.
I try to centralize the settings some hours … without success.
0
 

Author Closing Comment

by:Howzatt
ID: 39813947
Worked perfect
0

Featured Post

Better Security Awareness With Threat Intelligence

See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

Join & Write a Comment

SSL stands for “Secure Sockets Layer” and an SSL certificate is a critical component to keeping your website safe, secured, and compliant. Any ecommerce website must have an SSL certificate to ensure the safe handling of sensitive information like…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now