I've got rid of the auto-update for Java by disabling it through the registry. Is there a way to stop people from manually updating Java? If someone tries to update Java through other means, is there a way I can stop it from running?
- People? Are you talking about a domain or workgroup? I assume Java is needed or just uninstall it. It's a huge security risk not running the latest version. You can disable Java it in the browser via Control Panel>Java>Securityargentwolf– argentwolf2013-05-15 10:26:02 +00:00Commented May 15, 2013 at 10:26
- I'm assuming you are on windows. if the user can update java (which by default exists in program files) then they have the ability to become an admin via uac, so no, there is little-to-nothing you can do to constrain them. if you are on a domain, GPOs may be able to assert some control, but it will be iffy.Frank Thomas– Frank Thomas2013-05-15 11:47:46 +00:00Commented May 15, 2013 at 11:47
- 4Why would you disable the abilit to update Java? Doing that only leaves the user vulerable.Ramhound– Ramhound2013-05-15 12:12:43 +00:00Commented May 15, 2013 at 12:12
Add a comment |
1 Answer
"%PROGRAMFILES%\Java\jre7\bin\jqs.exe" -unregister msiexec /qn /x {4A03706F-666A-4037-7777-5F2748764D10} 
- Thanks, can you explain to me how this works? I just want to know for future situationsOchan– Ochan2013-05-16 02:46:05 +00:00Commented May 16, 2013 at 2:46
- what is the difference between your command prompt line and this one: "msiexec /x {4A03706F-666A-4037-7777-5F2748764D10} /qn"?Ochan– Ochan2013-05-16 02:54:27 +00:00Commented May 16, 2013 at 2:54
- @Ochan Reversed only arguments msiexec. Action teams will be no different.STTR– STTR2013-05-16 18:50:55 +00:00Commented May 16, 2013 at 18:50