How to add a Java Exception Site to the Java Control Panel, Security Tab for all users

I need to add a site to the Java Exception Site List in the Java Control Panel, Security Tab.  The site runs using an older version of Java, and the only way the site will load in the browsers running the current Java version is to add the is to add the site as an exception.  

If the exception is not added, the training pop up window doesn't launch and a message appears, "Application Blocked by Security Settings".  

The vendor of the application directed me to add the Java Exception, but I have multiple computers and multiple users that need it added.  The exception must be set for every user on every computer and is too time consuming to do manually.  Is there a way to set it globally for all the users and computers affected?

I am running a Windows Domain.
LVL 1
ehessAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

CEHJCommented:
The site runs using an older version of Java, and the only way the site will load in the browsers running the current Java version is to add the is to add the site as an exception.  
I'm guessing that's because the vendor didn't sign it with a proper cert. If i'm right (think back to when you first ran it) then they should now do so
0
GeisrudSystems AdministratorCommented:
Watching because I'm in the same situation.  I'm trying to use group policy to push this to all users, but haven't got it working yet.
0
Gabriel CliftonNet AdminCommented:
The exceptions are store here, C:\Users\{username}\AppData\LocalLow\Sun\Java\Deployment\security\exception.sites
Populate your file with what you want to add, copy it to a file share and use a logon script to copy the file for each user. This will make it to where users will not be able to add new sites.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

ehessAuthor Commented:
Gabriel Clifton, excellent answer and I'm hoping that'll solve it with a little more info.  What is the syntax of the exceptions within exception.sites?

ex.  
https://domain.com
0
Gabriel CliftonNet AdminCommented:
You are exactly correct on your example, it is just a simple text file named exception.sites and your https://domain.com or https://www.domain.com will start the first line. The next site is on the next line.
0
CEHJCommented:
You should also be aware that

a. properly designed Java apps should not refuse to run properly on the latest VMS
b. keeping an insecure (outdated) VM on your system is asking for trouble, since Java (along with certain Abobe products) is the number one software vector of malware
0
ehessAuthor Commented:
I added the site to the exception.sites file and put it in the C:\Users\{username}\AppData\LocalLow\Sun\Java\Deployment\security\ directory.  However, the test users that had the file added to their profile by this process still couldn't get the training to load.  The same pop up, application blocked by your security settings.  If I deleted the file and added the exception manually the program worked.  I am unsure what to do now.
0
Gabriel CliftonNet AdminCommented:
Have you tried adding it manually to one computer then taking that file and using group policy push the file to your systems. One idea as to why that did not work, (do not know how you created that file), is if you created a new file, renamed it, extensions were hidden and you actually created exception.sites.txt but since extensions were hidden you only saw exception.sites
0
ehessAuthor Commented:
I tried to copy one of the working exception.sites files that were made by Java when I added the exception manually to another user's profile.  It didn't work.  I'm about ready to give up and create a new generic user, setup the exception on every computer it if doesn't carry over and be done with this.
0
Gabriel CliftonNet AdminCommented:
I just tried it on a few systems and every time it worked.
0
ehessAuthor Commented:
I have the users setup as redirected folders and don't know if that's why the copied exceptions.sites file doesn't work without being manually added.  I've had some issues with the user profiles in the past with new apps because they were created an older way when Microsoft supported roaming users prior to redirected folders.  This all being said Gabriel Clifton was an excellent helper and provided accurate information how to fix my problem.  At this time, I have manually add the exception to a training user that can be used for the site and has the appropriate setting made.  I'll recreate all the user profiles in the near future to get away from the roaming user settings fully and try again to add it via GPO.  My instinct tells me it will work fine then.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Java

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.