Solved

Java and GPO

Posted on 2016-11-01
11
45 Views
Last Modified: 2016-11-09
Hello ITs.

I have some computers that need some sites to be added to the Exception Site List on Java, I'm looking to Push the exception site list for Java 8 Update 111 via GPO to Windows 10 Pro computers, instead of going one by one.
I have already Googled and have tried what some links say, but it doesn't work, maybe you know of some other link I can use.

Thanks.
0
Comment
Question by:Katrach0
  • 6
  • 4
11 Comments
 
LVL 53

Expert Comment

by:McKnife
Comment Utility
If I remember correctly, the trusted.certs file in %userprofile%\AppData\LocalLow\Sun\Java\Deployment\security is the one. But I might be wrong, it is a long time ago that we did this.
0
 

Author Comment

by:Katrach0
Comment Utility
McKnife

I've used this:

https://community.spiceworks.com/how_to/119934-add-exception-site-list-to-java-via-gpo

and this:

http://www.darkoperator.com/blog/2013/1/12/pushing-security-configuration-for-java-7-update-10-via-gpo.html

and it doesn't work, the only things different is that I'm working with Java 8 Update 111, Win 10 Pro and Win 2012 R2 and still doesn't work.
0
 
LVL 53

Expert Comment

by:McKnife
Comment Utility
Any comments on my suggestion? Or was it unclear? Maybe I should explain in detail: Take a test machine and configure it manually. Afterwards, copy the file trusted.certs in %userprofile%\AppData\LocalLow\Sun\Java\Deployment\security to another unconfigured machine and see if the browser behaves afterwards.
0
 

Author Comment

by:Katrach0
Comment Utility
On the actual GPO where do I do it?
I will give it a try.
0
 
LVL 53

Accepted Solution

by:
McKnife earned 500 total points
Comment Utility
Look, I told you, I wasn't sure if that file is even part of the solution, so just do as I told you - no GPOs, just a quick test...let me repeat:
Take a test machine and configure it manually. Afterwards, copy the file trusted.certs in %userprofile%\AppData\LocalLow\Sun\Java\Deployment\security to another unconfigured machine and verify if the exception list was indeed transferred that way.
0
Maximize Your Threat Intelligence Reporting

Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

 

Author Comment

by:Katrach0
Comment Utility
Hey I tried that and it works, the issue is that I have 226 computers that need that configuration, that's the most important part how to deploy it to all computers via GPO as I stated on the Title.
0
 
LVL 53

Expert Comment

by:McKnife
Comment Utility
No problem, that was my next step.
Read https://technet.microsoft.com/en-us/library/cc772536(v=ws.11).aspx about how we can deploy files using GPO. It would need to be configured in the user section and the target path would need to be (as above): %userprofile%\AppData\LocalLow\Sun\Java\Deployment\security\trusted.certs
0
 

Author Comment

by:Katrach0
Comment Utility
Tried and tried, step by step and for some reason won't take it, not sure if there's something to do with version 8.X of Java.

Thanks for all your help, will have to get this done manually.
0
 
LVL 53

Expert Comment

by:McKnife
Comment Utility
It will be a simple mistake.

1 it has to be a user GPO
2 thus, it has to be applied to an OU with user objects.

Is that the case? I guess it is not and that is your error.
0
 
LVL 53

Expert Comment

by:McKnife
Comment Utility
A working solution should not be deleted. We do the same in the way described, so I know it works.
0

Featured Post

Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

Ever wondered why Windows 8 and 10 don't seem to accept your GPO-based software deployment while Windows 7 does? Read on.
This is an article about Leadership and accepting and adapting to new challenges. It focuses mostly on upgrading to Windows 10.
Viewers learn about the “for” loop and how it works in Java. By comparing it to the while loop learned before, viewers can make the transition easily. You will learn about the formatting of the for loop as we write a program that prints even numbers…
This video teaches viewers about errors in exception handling.

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now