Solved

Java and GPO

Posted on 2016-11-01
11
68 Views
Last Modified: 2016-11-09
Hello ITs.

I have some computers that need some sites to be added to the Exception Site List on Java, I'm looking to Push the exception site list for Java 8 Update 111 via GPO to Windows 10 Pro computers, instead of going one by one.
I have already Googled and have tried what some links say, but it doesn't work, maybe you know of some other link I can use.

Thanks.
0
Comment
Question by:Katrach0
  • 6
  • 4
11 Comments
 
LVL 53

Expert Comment

by:McKnife
ID: 41869662
If I remember correctly, the trusted.certs file in %userprofile%\AppData\LocalLow\Sun\Java\Deployment\security is the one. But I might be wrong, it is a long time ago that we did this.
0
 

Author Comment

by:Katrach0
ID: 41870697
McKnife

I've used this:

https://community.spiceworks.com/how_to/119934-add-exception-site-list-to-java-via-gpo

and this:

http://www.darkoperator.com/blog/2013/1/12/pushing-security-configuration-for-java-7-update-10-via-gpo.html

and it doesn't work, the only things different is that I'm working with Java 8 Update 111, Win 10 Pro and Win 2012 R2 and still doesn't work.
0
 
LVL 53

Expert Comment

by:McKnife
ID: 41871143
Any comments on my suggestion? Or was it unclear? Maybe I should explain in detail: Take a test machine and configure it manually. Afterwards, copy the file trusted.certs in %userprofile%\AppData\LocalLow\Sun\Java\Deployment\security to another unconfigured machine and see if the browser behaves afterwards.
0
 

Author Comment

by:Katrach0
ID: 41872932
On the actual GPO where do I do it?
I will give it a try.
0
 
LVL 53

Accepted Solution

by:
McKnife earned 500 total points
ID: 41872985
Look, I told you, I wasn't sure if that file is even part of the solution, so just do as I told you - no GPOs, just a quick test...let me repeat:
Take a test machine and configure it manually. Afterwards, copy the file trusted.certs in %userprofile%\AppData\LocalLow\Sun\Java\Deployment\security to another unconfigured machine and verify if the exception list was indeed transferred that way.
0
Ransomware-A Revenue Bonanza for Service Providers

Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat.  The purpose of this eBook is to educate the reader about ransomware attacks.

 

Author Comment

by:Katrach0
ID: 41873223
Hey I tried that and it works, the issue is that I have 226 computers that need that configuration, that's the most important part how to deploy it to all computers via GPO as I stated on the Title.
0
 
LVL 53

Expert Comment

by:McKnife
ID: 41873540
No problem, that was my next step.
Read https://technet.microsoft.com/en-us/library/cc772536(v=ws.11).aspx about how we can deploy files using GPO. It would need to be configured in the user section and the target path would need to be (as above): %userprofile%\AppData\LocalLow\Sun\Java\Deployment\security\trusted.certs
0
 

Author Comment

by:Katrach0
ID: 41877681
Tried and tried, step by step and for some reason won't take it, not sure if there's something to do with version 8.X of Java.

Thanks for all your help, will have to get this done manually.
0
 
LVL 53

Expert Comment

by:McKnife
ID: 41877684
It will be a simple mistake.

1 it has to be a user GPO
2 thus, it has to be applied to an OU with user objects.

Is that the case? I guess it is not and that is your error.
0
 
LVL 53

Expert Comment

by:McKnife
ID: 41878305
A working solution should not be deleted. We do the same in the way described, so I know it works.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

What to do when Windows Update is not working correctly? What tools can I use to detect the cause of the malfunction problem? What does this numeric error code mean? These and other questions that you have been asking in the past are answered here (…
How to record audio from input sources to your PC – connected devices, connected preamp to record vinyl discs, streaming media, that play through your audio card: Vista, Windows 7, Windows 8, Windows 8.1 and Windows 10 – both 32 bit & 64.
This tutorial covers a practical example of lazy loading technique and early loading technique in a Singleton Design Pattern.
Viewers will learn how to properly install Eclipse with the necessary JDK, and will take a look at an introductory Java program. Download Eclipse installation zip file: Extract files from zip file: Download and install JDK 8: Open Eclipse and …

912 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

24 Experts available now in Live!

Get 1:1 Help Now