Not sure about 8.
With respect to the expiring versions prompt, we found that instead of putting a file in to c:\windows\sun\... referencing deployment.properties in the user's profile, we can just copy deployment.properties to C:\Program Files (x86)\Java\jre7\lib, and that has the same effect.
From: Austin Macdade [mailto:amacdade-kFvbIKOxJuEBRvs27n/***@public.gmane.org]
Sent: Saturday, 18 October 2014 2:27 AM
To: Patch Management Mailing List
Subject: RE: [patchmanagement] Java prompting to update, despite installing AutoUpdateOff versionturning off Update reg keys
Is this for both JRE 7 and JRE 8?
I'm wondering because for the command line installation documentation for the latest JRE 7, there's a listed flag [SPONSORS=0]:
http://docs.oracle.com/javase/7/docs/webnotes/install/windows/jre-installer-options.html
But for JRE 8, I don't see a sponsors installation option in the documentation:
http://docs.oracle.com/javase/8/docs/technotes/guides/install/config.html
From: Turner, Glenn [mailto:Glenn.Turner-f9EMQ65GSDK6c6uEtOJ/***@public.gmane.org]
Sent: Wednesday, October 15, 2014 5:58 PM
To: Patch Management Mailing List
Subject: RE: [patchmanagement] Java prompting to update, despite installing AutoUpdateOff versionturning off Update reg keys
Don't forget that there is the new setting in the Java control panel to suppress "offers".
From: Kennedy, Jim [mailto:kennedyjim-nJ6xh/3fsv2HIaL1k+CUyti2O/***@public.gmane.org]
Sent: Thursday, 16 October 2014 3:56 AM
To: Patch Management Mailing List
Subject: RE: [patchmanagement] Java prompting to update, despite installing AutoUpdateOff versionturning off Update reg keys
If your users are installing Java and the included Ask then they are local admins, so any controls you try and put in place on Java are going to be moot.
From: Rick McClure [mailto:rmcclure-UI00hZ9slmIwK5AITqY/***@public.gmane.org]
Sent: Wednesday, October 15, 2014 11:54 AM
To: Patch Management Mailing List
Subject: RE: [patchmanagement] Java prompting to update, despite installing AutoUpdateOff versionturning off Update reg keys
Glen makes a good point. Where is the 'list' of all the options for manipulating Java....or Flash and Adobe products as well?
What I've done in the past is rename the java folder under program files (x86)\common files but there should be an easier way to it.
It is ESPECIALLY ANNOYING that some users will install this and also the optional Ask or Google toolbar and search defaults. So who is who's friend, huh?
Rick.
From: Mike Cramer [mailto:mike.cramer-1ViLX0X+***@public.gmane.org]
Sent: Wednesday, October 15, 2014 7:23 AM
To: Patch Management Mailing List
Subject: RE: [patchmanagement] Java prompting to update, despite installing AutoUpdateOff versionturning off Update reg keys
For my java deployments I've created a customized MST that disables Auto Update.
From: Turner, Glenn [mailto:Glenn.Turner-f9EMQ65GSDK6c6uEtOJ/***@public.gmane.org]
Sent: Wednesday, October 15, 2014 02:21
To: Patch Management Mailing List
Subject: RE:[patchmanagement] Java prompting to update, despite installing AutoUpdateOff versionturning off Update reg keys
This GUID isn't installed on my systems. The fact that this is prompting and I can't turn it off is deeply concerning.
Another issue is that even though we have access to Java with AutoUpdate Off via our support contract, there doesn't seem to be anywhere we can turn to for official technical support for this. It's all web-based user-to-user help.
Glenn
From: Austin Macdade [mailto:amacdade-kFvbIKOxJuEBRvs27n/***@public.gmane.org]
Sent: Wednesday, 15 October 2014 12:30 PM
To: Patch Management Mailing List
Subject: RE:[patchmanagement] Java prompting to update, despite installing AutoUpdateOff versionturning off Update reg keys
That's why I uninstall the java updater after it installs. You should check for the uninstall string in your registry with each new version, but I've been able to remove it with 'msiexec.exe /x {4a03706f-666a-4037-7777-5f2748764d10} /qn /norestart' for the past several versions.
From: Turner, Glenn [mailto:Glenn.Turner-f9EMQ65GSDK6c6uEtOJ/***@public.gmane.org]
Sent: Tuesday, October 14, 2014 9:01 PM
To: Patch Management Mailing List
Subject: [patchmanagement] Java prompting to update, despite installing AutoUpdateOff versionturning off Update reg keys
Until Oracle released the new version this morning, we were running with the latest Java 7 Runtime Environment security baseline (Update 65).
Our users are now complaining that they are getting a prompt to upgrade Java. Unbelieveable! Anyone else seeing this?
This is what we download from Oracle Support (replace 72 with 65 for last quarter's update):
[cid:image001.jpg-0ZFmVdWuYbyO/n7cfS6+***@public.gmane.org]
Reg keys set as follows:
[cid:image002.jpg-0ZFmVdWuYbyO/n7cfS6+***@public.gmane.org]
Did someone screw up last quarter's AutoUpdate Off version? Not sure how we can even test this for this quarter until they release a new security baseline.
Any ideas?
---
PatchManagement.org is hosted by Shavlik
The content on the email list is intended for assisting administrators. If you would like to use any of this content in a blog or media publication, please contact the owners of the list for approval.
To unsubscribe send a blank email to leave-***@patchmanagement.org
If you are unable to unsubscribe via this email address, please email
owner-patchmanagement-Vbinuuz+i/1cyoYjzPa5A0B+***@public.gmane.org