Link to home
Start Free TrialLog in
Avatar of Lizandro Diaz
Lizandro DiazFlag for United States of America

asked on

Java and GPO

Hello ITs.

I have some computers that need some sites to be added to the Exception Site List on Java, I'm looking to Push the exception site list for Java 8 Update 111 via GPO to Windows 10 Pro computers, instead of going one by one.
I have already Googled and have tried what some links say, but it doesn't work, maybe you know of some other link I can use.

Thanks.
Avatar of McKnife
McKnife
Flag of Germany image

If I remember correctly, the trusted.certs file in %userprofile%\AppData\LocalLow\Sun\Java\Deployment\security is the one. But I might be wrong, it is a long time ago that we did this.
Avatar of Lizandro Diaz

ASKER

McKnife

I've used this:

https://community.spiceworks.com/how_to/119934-add-exception-site-list-to-java-via-gpo

and this:

http://www.darkoperator.com/blog/2013/1/12/pushing-security-configuration-for-java-7-update-10-via-gpo.html

and it doesn't work, the only things different is that I'm working with Java 8 Update 111, Win 10 Pro and Win 2012 R2 and still doesn't work.
Any comments on my suggestion? Or was it unclear? Maybe I should explain in detail: Take a test machine and configure it manually. Afterwards, copy the file trusted.certs in %userprofile%\AppData\LocalLow\Sun\Java\Deployment\security to another unconfigured machine and see if the browser behaves afterwards.
On the actual GPO where do I do it?
I will give it a try.
ASKER CERTIFIED SOLUTION
Avatar of McKnife
McKnife
Flag of Germany image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Hey I tried that and it works, the issue is that I have 226 computers that need that configuration, that's the most important part how to deploy it to all computers via GPO as I stated on the Title.
No problem, that was my next step.
Read https://technet.microsoft.com/en-us/library/cc772536(v=ws.11).aspx about how we can deploy files using GPO. It would need to be configured in the user section and the target path would need to be (as above): %userprofile%\AppData\LocalLow\Sun\Java\Deployment\security\trusted.certs
Tried and tried, step by step and for some reason won't take it, not sure if there's something to do with version 8.X of Java.

Thanks for all your help, will have to get this done manually.
It will be a simple mistake.

1 it has to be a user GPO
2 thus, it has to be applied to an OU with user objects.

Is that the case? I guess it is not and that is your error.
A working solution should not be deleted. We do the same in the way described, so I know it works.