Windows – How to block the Java installer

blockingjavawindowswindows 7

We send PC's out to customers that need a very specific version of Java installed; specifically 6.26. I already disable the Java updater but I was wondering if I could block the customer from installing a new version of Java manually without forcing them to run as a limited user. Currently, the PC's run as local administrators with Windows 7 64-bit.

Perhaps an application that provides a blacklist functionality? I also use the IE9 Blocker Toolkit to disable Internet Explorer 9 installation. Is there a possible equivalent for Java?

Edit based on comments – Java is used with a java applet on our website, not a standalone application. I have no power to alter our site to be compatible with newer version of the software. I'm simply trying to limit the ability to update Java to cut down the amount of support calls.

Best Answer

For the love of God, package your app with a local copy of the Java binary if your app needs a specific version. Don't rely on the system-installed binary. This prevents the users from being able to update their Java browser plug-ins.

With the recent major vulnerabilities in Java lately, I'd stop using your product immediately if you told me I couldn't update Java.

That said, if your customers are administrators on these computers, there is nothing you can do to prevent this. Write better code.

Related Solutions

Windows – How to find what process is holding a file open in Windows

I've had success with Sysinternals Process Explorer. With this, you can search to find what process(es) have a file open, and you can use it to close the handle(s) if you want. Of course, it is safer to close the whole process. Exercise caution and judgement.

To find a specific file, use the menu option Find->Find Handle or DLL... Type in part of the path to the file. The list of processes will appear below.

If you prefer command line, Sysinternals suite includes command line tool Handle, that lists open handles.

Examples

c:\Program Files\SysinternalsSuite>handle.exe |findstr /i "e:\" (finds all files opened from drive e:\"
c:\Program Files\SysinternalsSuite>handle.exe |findstr /i "file-or-path-in-question"

Java – How to block Java updates, network-wide

To disable the auto-update notification you should be able to set the dword value at HKLM\SOFTWARE\JavaSoft\Java Update\Policy\EnableJavaUpdate to 0 and HKLM\SOFTWARE\JavaSoft\Java Update\Policy\NotifyInstall to 0.

Here is a fragment from on of my startup scripts.

Option Explicit

Dim oShell
Set oShell = WScript.CreateObject("WScript.Shell")

DisableJavaUpdateNotification()

Function DisableJavaUpdateNotification
    Dim Key,Value
    Key="HKLM\SOFTWARE\JavaSoft\Java Update\Policy\EnableJavaUpdate"
    Value="0"
    oShell.RegWrite Key,Value,"REG_DWORD"
    Key="HKLM\SOFTWARE\JavaSoft\Java Update\Policy\NotifyInstall"
    Value="0"
    oShell.RegWrite Key,Value,"REG_DWORD"
End Function

Best Answer

Related Solutions

Windows – How to find what process is holding a file open in Windows

Java – How to block Java updates, network-wide

Related Topic