Windows – How to disable Java across all browsers via registry

group-policyjavawindowswindows-registry

With the known Java threat on the loose, I've pushed a GPO to disable Java within IE. However, I'd like to disable Java across all browsers. Java provides documentation on how to do this via their new control panel: How do I disable Java in my web browser?

I'd like to push out this setting via Group Policy. I imagine this should be able to be done by identifying the registry setting that is modified by the Java Control Panel.

Has anyone identified the registry settings needed to disable Java across all browsers?

Best Answer

Update: Microsoft has published KB 2751647 which describes the necessary settings:

http://support.microsoft.com/kb/2751647

For these scenarios, I usually just take a before/after snapshot using reg. 

REG EXPORT HKLM HKLM-Before.txt  
REG EXPORT HKCU HKCU-Before.txt

Make the configuration setting changes... 

REG EXPORT HKLM HKLM-After.txt  
REG EXPORT HKCU HKCU-After.txt

Then using a decent text editor like Notepad++ with the Compare add-in to identify the differences in each before/after file set.

If you have both x86 and x64 platforms, you will most likely need two different sets of registry values and GPO's, as almost everyone uses 32-bit java even if the platform is x64.

Related Topic