• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 8287
  • Last Modified:

How to add a Java Exception Site to the Java Control Panel, Security Tab for all users

I need to add a site to the Java Exception Site List in the Java Control Panel, Security Tab.  The site runs using an older version of Java, and the only way the site will load in the browsers running the current Java version is to add the is to add the site as an exception.  

If the exception is not added, the training pop up window doesn't launch and a message appears, "Application Blocked by Security Settings".  

The vendor of the application directed me to add the Java Exception, but I have multiple computers and multiple users that need it added.  The exception must be set for every user on every computer and is too time consuming to do manually.  Is there a way to set it globally for all the users and computers affected?

I am running a Windows Domain.
0
ehess
Asked:
ehess
  • 4
  • 4
  • 2
  • +1
1 Solution
 
CEHJCommented:
The site runs using an older version of Java, and the only way the site will load in the browsers running the current Java version is to add the is to add the site as an exception.  
I'm guessing that's because the vendor didn't sign it with a proper cert. If i'm right (think back to when you first ran it) then they should now do so
0
 
GeisrudSystems AdministratorCommented:
Watching because I'm in the same situation.  I'm trying to use group policy to push this to all users, but haven't got it working yet.
0
 
Gabriel CliftonCommented:
The exceptions are store here, C:\Users\{username}\AppData\LocalLow\Sun\Java\Deployment\security\exception.sites
Populate your file with what you want to add, copy it to a file share and use a logon script to copy the file for each user. This will make it to where users will not be able to add new sites.
0
The new generation of project management tools

With monday.com’s project management tool, you can see what everyone on your team is working in a single glance. Its intuitive dashboards are customizable, so you can create systems that work for you.

 
ehessAuthor Commented:
Gabriel Clifton, excellent answer and I'm hoping that'll solve it with a little more info.  What is the syntax of the exceptions within exception.sites?

ex.  
https://domain.com
0
 
Gabriel CliftonCommented:
You are exactly correct on your example, it is just a simple text file named exception.sites and your https://domain.com or https://www.domain.com will start the first line. The next site is on the next line.
0
 
CEHJCommented:
You should also be aware that

a. properly designed Java apps should not refuse to run properly on the latest VMS
b. keeping an insecure (outdated) VM on your system is asking for trouble, since Java (along with certain Abobe products) is the number one software vector of malware
0
 
ehessAuthor Commented:
I added the site to the exception.sites file and put it in the C:\Users\{username}\AppData\LocalLow\Sun\Java\Deployment\security\ directory.  However, the test users that had the file added to their profile by this process still couldn't get the training to load.  The same pop up, application blocked by your security settings.  If I deleted the file and added the exception manually the program worked.  I am unsure what to do now.
0
 
Gabriel CliftonCommented:
Have you tried adding it manually to one computer then taking that file and using group policy push the file to your systems. One idea as to why that did not work, (do not know how you created that file), is if you created a new file, renamed it, extensions were hidden and you actually created exception.sites.txt but since extensions were hidden you only saw exception.sites
0
 
ehessAuthor Commented:
I tried to copy one of the working exception.sites files that were made by Java when I added the exception manually to another user's profile.  It didn't work.  I'm about ready to give up and create a new generic user, setup the exception on every computer it if doesn't carry over and be done with this.
0
 
Gabriel CliftonCommented:
I just tried it on a few systems and every time it worked.
0
 
ehessAuthor Commented:
I have the users setup as redirected folders and don't know if that's why the copied exceptions.sites file doesn't work without being manually added.  I've had some issues with the user profiles in the past with new apps because they were created an older way when Microsoft supported roaming users prior to redirected folders.  This all being said Gabriel Clifton was an excellent helper and provided accurate information how to fix my problem.  At this time, I have manually add the exception to a training user that can be used for the site and has the appropriate setting made.  I'll recreate all the user profiles in the near future to get away from the roaming user settings fully and try again to add it via GPO.  My instinct tells me it will work fine then.
0

Featured Post

Never miss a deadline with monday.com

The revolutionary project management tool is here!   Plan visually with a single glance and make sure your projects get done.

  • 4
  • 4
  • 2
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now