Java and GPO

Hello ITs.

I have some computers that need some sites to be added to the Exception Site List on Java, I'm looking to Push the exception site list for Java 8 Update 111 via GPO to Windows 10 Pro computers, instead of going one by one.
I have already Googled and have tried what some links say, but it doesn't work, maybe you know of some other link I can use.

Thanks.
Katrach0System AdminAsked:
Who is Participating?
 
McKnifeConnect With a Mentor Commented:
Look, I told you, I wasn't sure if that file is even part of the solution, so just do as I told you - no GPOs, just a quick test...let me repeat:
Take a test machine and configure it manually. Afterwards, copy the file trusted.certs in %userprofile%\AppData\LocalLow\Sun\Java\Deployment\security to another unconfigured machine and verify if the exception list was indeed transferred that way.
0
 
McKnifeCommented:
If I remember correctly, the trusted.certs file in %userprofile%\AppData\LocalLow\Sun\Java\Deployment\security is the one. But I might be wrong, it is a long time ago that we did this.
0
 
Katrach0System AdminAuthor Commented:
McKnife

I've used this:

https://community.spiceworks.com/how_to/119934-add-exception-site-list-to-java-via-gpo

and this:

http://www.darkoperator.com/blog/2013/1/12/pushing-security-configuration-for-java-7-update-10-via-gpo.html

and it doesn't work, the only things different is that I'm working with Java 8 Update 111, Win 10 Pro and Win 2012 R2 and still doesn't work.
0
Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

 
McKnifeCommented:
Any comments on my suggestion? Or was it unclear? Maybe I should explain in detail: Take a test machine and configure it manually. Afterwards, copy the file trusted.certs in %userprofile%\AppData\LocalLow\Sun\Java\Deployment\security to another unconfigured machine and see if the browser behaves afterwards.
0
 
Katrach0System AdminAuthor Commented:
On the actual GPO where do I do it?
I will give it a try.
0
 
Katrach0System AdminAuthor Commented:
Hey I tried that and it works, the issue is that I have 226 computers that need that configuration, that's the most important part how to deploy it to all computers via GPO as I stated on the Title.
0
 
McKnifeCommented:
No problem, that was my next step.
Read https://technet.microsoft.com/en-us/library/cc772536(v=ws.11).aspx about how we can deploy files using GPO. It would need to be configured in the user section and the target path would need to be (as above): %userprofile%\AppData\LocalLow\Sun\Java\Deployment\security\trusted.certs
0
 
Katrach0System AdminAuthor Commented:
Tried and tried, step by step and for some reason won't take it, not sure if there's something to do with version 8.X of Java.

Thanks for all your help, will have to get this done manually.
0
 
McKnifeCommented:
It will be a simple mistake.

1 it has to be a user GPO
2 thus, it has to be applied to an OU with user objects.

Is that the case? I guess it is not and that is your error.
0
 
McKnifeCommented:
A working solution should not be deleted. We do the same in the way described, so I know it works.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.