Java issues for terminal server users

I have not had any luck getting Java to work for my thin client users on our Server 2008 R2 servers. I sure could use some help. I have seen several threads out there on this topic and tried giving permissions in the registry, installing java in terminal server mode, installing as the local administrator (not domain admin) and used procmon to try and see if i could find the problem myself (i cant decipher it even though i've filtered out most of the non-java related stuff. I'm not sure what to do at this point. Please help! I don't want to give people temporary access as an admin to solve the problem either. :(
RVFB ITAsked:
Who is Participating?
 
RVFB ITAuthor Commented:
after a lot of troubleshooting this morning, i have found what fixes this, although i dont know what causes it still....

i removed the test user from the folder redirection group with no success
i removed the test user from a terminal services group with no success
i put the test user in an OU that blocks all GPOs with no success
i made the test user a local admin user with no success

I reset IE's settings and finally resolved the issue
Tested resetting IE settings on terminal server users that have folder redirection and that are not local admins successfully also.

So i guess if anyone has an issue or calls me from now on, i just reset their IE settings to resolve this issue.. Seems simple enough. Not sure why IE is acting this way. Any theories? The plugin is enabled so i know that's not the root of the problem.
0
 
KimputerCommented:
What the current exact problem? Which Java version installation did you choose (v7? v8? 32 bits? 64 bits?) ? Is the error during installation? Or the installation finishes successfully and the user just can't use it? If the user can't use it, what eror messages are shown? Or can the user use it, but only not for some other sites? Do simple tests like http://javatester.org/version.html work?
0
 
RVFB ITAuthor Commented:
Well, it works on the local admin or domain admin accounts on the terminal server. I am testing by going to http://www.java.com/verify

A thin client user just gets an empty gray box on their screen when they try to verify java works. I am choosing the latest version available on the java website, whatever that is and the server is 64 bit, so I'm assuming the installer from the java website is installing a 64 bit version. Although after having written the prior sentence, I checked and it's installing in the program files (x86) folder and the applet in the control panel says 32 bit.... hmm Inserting a picture of java version below...

java-version.JPG
I've not tried the link you proposed yet.
0
Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

 
KimputerCommented:
Which browser did you test for the user? (IE? Chrome? 32 bits/64bits?)
0
 
RVFB ITAuthor Commented:
Firefox and IE 10

from the shortcut paths, looks like Firefox is 32 bit and IE 10 is 64 bit
0
 
KimputerCommented:
In Firefox, in the java grey area, what will clicking on it do, what will right mouse click on it do?
0
 
RVFB ITAuthor Commented:
just tried that Kimputer... nothing happens when you double click it or right mouse click it
0
 
KimputerCommented:
Is Java listed in Firefox's extensions/plugins list?
In Control Panel > Java > Java tab > View, is the "Enabled" checkbox ticked?
In the Advanced tab, what do you see at the Default Java for Browsers option?
0
 
RVFB ITAuthor Commented:
Here are the answers to your questions... thanks

faith-2.JPG
faith-1.JPG
0
 
KimputerCommented:
Did you make those screenshots during admin login, or as a user?
0
 
Keith ChiltonCommented:
as the user having the problem
0
 
KimputerCommented:
Is it possible to do another test (I don't have problems with Chrome and Java in my Citrix environment). Please install Chrome 32 bits?
0
 
RVFB ITAuthor Commented:
i did your request and chrome does the same thing that firefox and IE do...
0
 
KimputerCommented:
Sorry, I can't think of any sound solution right now, other then do a full uninstall, and re-install with NO users connected to the server while doing so.
0
 
RVFB ITAuthor Commented:
I did that already...
0
 
KimputerCommented:
Full uninstall. Log in as a user, delete the sun/java keys in regedit: HKCU\Software
Log in as user, in regedit delete all java keys in HKLM\Software, but also the HKLM\Software\WOW6432Node
Make sure the security on the java program folder is user readable (write not needed).
Reinstall again (different java folder, instead if jre1.8.0_40 or something, just in jre8
Check regedit java permission (should be user readable, write not needed)
It is probably a security settings you changed (default should already work). You can already prove it by making a user admin, and logging in, you will see suddenly the user can load java pages.
0
 
Tony JLead Technical ArchitectCommented:
Hi

Procmon really is your friend here as it sounds like it's simply a permissions issue.

Easy to say, hard to find.

What I would do is as follows:

1. Log onto the RDS server as an admin.

2. Launch Process Monitor

3. First step - get rid of the clutter. Click on the magnifying glass icon to stop it running.

4. Click the eraser icon (two along to the right of the magnifying glass) to clear the screen.

5. Click on the filter icon (to the left of the red underlined capital A icon)

6. Click on the drop down box that currently shows Architecture and select Process Name

7. Leave the 'is' in the box to the right of it

8. Type in iexplore.exe in the box to the right of the 'is'

9. Click Add and you should see it appear in the window below as a green circle with a tick in it

10. Click ok

11. Back on the main screen, click the capitalised A with the red line under it

12. Click the box with Architecture in it and select result

13. Click the 'is' to the right of this and select contains

14. In the box to the right of this, type in denied

15. Click Add

16. Click OK

17. Back on the main screen, top right, ensure that only the Registry and File icons are selected. Don't worry if you get that bit wrong too much.

18. Stay logged on with the screen open and logon from a thin client as a normal user.

19. Once logged on, from the server again, click the magnifying glass

20. Launch IE and test Java

21. Once you're happy you're at a point it's failed, click the magnifying glass icon again.

22. Scroll up and down (or search) for Access Denied. Fix any permissions on any keys and files that appear Java related.
0
 
RVFB ITAuthor Commented:
I'll have to come back in after hours to try these things... I had already tried procmon and saved a log , somewhere. I can't seem to locate that log now though. When i looked at it, i couldn't find anything that made sense to take me to the next step. It does seem like a permissions thing, and I was looking for that when i reviewed the procmon log... wish i could find that thing around here. Will probably have to do it again
0
 
Tony JLead Technical ArchitectCommented:
I wouldn't bother with the log you have saved to be honest. If you didn't filter then you're going to get a lot of extraneous stuff in there.

If you follow my steps above it'll help you to pinpoint specific keys from within IE and hopefully Java.
0
 
RVFB ITAuthor Commented:
Tony, I used your suggestion to filter my log i had taken and then saved it with the filter applied so all the extraneous info was ignored. Can I email you my procmon log file? The "access is denied" filter you suggested doesn't yield any results.
0
 
RVFB ITAuthor Commented:
I dont think the emailing you matters due to sensitivity.  I'll just post it out here.. I filtered out all the results=success too
Logfile.CSV
0
 
RVFB ITAuthor Commented:
One thing that I noticed was there is nothing inside of the C:\windows\sun folder at all.. Should there be?
0
 
KimputerCommented:
Java only depends on the Program Files\Java folder and HKLM\Software\Java(or Javasoft and with WOW6432Node if 32 bits is installed on 64bits OS) registries (and following that the HKCU\Software\Java entries)
0
 
RVFB ITAuthor Commented:
Tony1044 - There are no results=denied in my log capture.....
0
 
RVFB ITAuthor Commented:
procmon screenshot
This is a screenshot of the procmon results ... I did the filter setup like

result is not success
path contains bflynn   (this is the user who attempted to do a java verification on thin client)

i highlighted some of them that have the DNS name of our internet filter we use "internetfilter"

Any ideas as to what to try from here now? I can't get anywhere to resolve this. help!
0
 
RVFB ITAuthor Commented:
btw - the user has folder redirection.. all of our thin clients do
0
 
RVFB ITAuthor Commented:
http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Windows/Windows_Vista/Q_23121506.html

I think this might be on the right track.... A terminal server user and java issue... tried doing the VBScript but doesn't change the results to get java working
0
 
RVFB ITAuthor Commented:
i guess i just need to change the cache for java to somewhere else basically.. any ideas how to do this easily? would like to do it in a GPO
0
 
KimputerCommented:
First of all, if you really think it's a folder redirection issue (highly possible!), you can test it with a new user, and make sure the folder redirection does NOT apply to this user.
If the user CAN use JAVA, you are indeed on the right track.
I asked you to make a user admin also, that would probably have failed).

Please post results, so we can move another step closer.

Extra note: on a standalone PC, with Java WORKING PROPERPLY, the same lines will also occur (desktop\sun\etc etc, including failed). This is not a clear sign of anything yet.
Therefore, the admin test is still needed.
0
 
RVFB ITAuthor Commented:
Because my troubleshooting resolved issue, not advice given by others. The solution was not related to their advice given
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.