Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

Java and GPO

Posted on 2016-11-01
11
Medium Priority
?
452 Views
Last Modified: 2016-11-09
Hello ITs.

I have some computers that need some sites to be added to the Exception Site List on Java, I'm looking to Push the exception site list for Java 8 Update 111 via GPO to Windows 10 Pro computers, instead of going one by one.
I have already Googled and have tried what some links say, but it doesn't work, maybe you know of some other link I can use.

Thanks.
0
Comment
Question by:Katrach0
  • 6
  • 4
10 Comments
 
LVL 58

Expert Comment

by:McKnife
ID: 41869662
If I remember correctly, the trusted.certs file in %userprofile%\AppData\LocalLow\Sun\Java\Deployment\security is the one. But I might be wrong, it is a long time ago that we did this.
0
 

Author Comment

by:Katrach0
ID: 41870697
McKnife

I've used this:

https://community.spiceworks.com/how_to/119934-add-exception-site-list-to-java-via-gpo

and this:

http://www.darkoperator.com/blog/2013/1/12/pushing-security-configuration-for-java-7-update-10-via-gpo.html

and it doesn't work, the only things different is that I'm working with Java 8 Update 111, Win 10 Pro and Win 2012 R2 and still doesn't work.
0
 
LVL 58

Expert Comment

by:McKnife
ID: 41871143
Any comments on my suggestion? Or was it unclear? Maybe I should explain in detail: Take a test machine and configure it manually. Afterwards, copy the file trusted.certs in %userprofile%\AppData\LocalLow\Sun\Java\Deployment\security to another unconfigured machine and see if the browser behaves afterwards.
0
Get free NFR key for Veeam Availability Suite 9.5

Veeam is happy to provide a free NFR license (1 year, 2 sockets) to all certified IT Pros. The license allows for the non-production use of Veeam Availability Suite v9.5 in your home lab, without any feature limitations. It works for both VMware and Hyper-V environments

 

Author Comment

by:Katrach0
ID: 41872932
On the actual GPO where do I do it?
I will give it a try.
0
 
LVL 58

Accepted Solution

by:
McKnife earned 1500 total points
ID: 41872985
Look, I told you, I wasn't sure if that file is even part of the solution, so just do as I told you - no GPOs, just a quick test...let me repeat:
Take a test machine and configure it manually. Afterwards, copy the file trusted.certs in %userprofile%\AppData\LocalLow\Sun\Java\Deployment\security to another unconfigured machine and verify if the exception list was indeed transferred that way.
0
 

Author Comment

by:Katrach0
ID: 41873223
Hey I tried that and it works, the issue is that I have 226 computers that need that configuration, that's the most important part how to deploy it to all computers via GPO as I stated on the Title.
0
 
LVL 58

Expert Comment

by:McKnife
ID: 41873540
No problem, that was my next step.
Read https://technet.microsoft.com/en-us/library/cc772536(v=ws.11).aspx about how we can deploy files using GPO. It would need to be configured in the user section and the target path would need to be (as above): %userprofile%\AppData\LocalLow\Sun\Java\Deployment\security\trusted.certs
0
 

Author Comment

by:Katrach0
ID: 41877681
Tried and tried, step by step and for some reason won't take it, not sure if there's something to do with version 8.X of Java.

Thanks for all your help, will have to get this done manually.
0
 
LVL 58

Expert Comment

by:McKnife
ID: 41877684
It will be a simple mistake.

1 it has to be a user GPO
2 thus, it has to be applied to an OU with user objects.

Is that the case? I guess it is not and that is your error.
0
 
LVL 58

Expert Comment

by:McKnife
ID: 41878305
A working solution should not be deleted. We do the same in the way described, so I know it works.
0

Featured Post

NFR key for Veeam Agent for Linux

Veeam is happy to provide a free NFR license for one year.  It allows for the non‑production use and valid for five workstations and two servers. Veeam Agent for Linux is a simple backup tool for your Linux installations, both on‑premises and in the public cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

There are many software programs on offer that will claim to magically speed up your computer. The best advice I can give you is to avoid them like the plague, because they will often cause far more problems than they solve. Try some of these "do it…
A small collection of useful tips and tricks for Windows 10 users that I decided to write as a result of recent questions that were asked and answered at Experts Exchange. Two short video tutorials included. Enjoy..
Viewers will learn how to properly install Eclipse with the necessary JDK, and will take a look at an introductory Java program. Download Eclipse installation zip file: Extract files from zip file: Download and install JDK 8: Open Eclipse and …
In this video, viewers are given an introduction to using the Windows 10 Snipping Tool, how to quickly locate it when it's needed and also how make it always available with a single click of a mouse button, by pinning it to the Desktop Task Bar. Int…
Suggested Courses
Course of the Month15 days, 14 hours left to enroll

580 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question