witch Posted May 13, 2014 Posted May 13, 2014 (edited) The new version of Java blocks games from that well known den of vice, the Royal Society of Chemistry. I am sure it blocks others as well, but as it is the students cannot access the security settings to set the level to medium which will allow the games to run. I am sure that there are many other sites which are now blocked and the unblocking is per user so I am looking for a way to allow the students and staff to access java from the start button as the administrator can. The student shortcuts are all redirected and the staff ones are done via GP The problem is I can't work out where the actual security settings are located so I am struggling to create a shortcut. (I want the "configure" bit) Can anyone help? A simple script to set the security level might work I suppose but it is a bit beyond me. The Science teacher is understandably very cross that she cannot use sites that have always worked in the past and so any solution at all would be great Edited May 13, 2014 by witch
fiza Posted May 13, 2014 Posted May 13, 2014 (edited) @witch I cant remember If I read it on here or used google but here is how we do it: EDIT: Its was on here : http://www.edugeek.net/forums/windows/129066-setting-java-control-panel-security-gpo.html Copy the 2 files (found after you install JAVA) : deployment.config deployment.properties into c:\windows\sun\java\deployment\ If it doesnt exist create the folder structure If you open deployment.properties in notepad you will see a line: deployment.security.level=MEDIUM This is how the security is set. Levels are MEDIUM,HIGH, VERY HIGH. This will then set security to medium for any user logging on to that machine. Edited May 13, 2014 by fiza 2
JJonas Posted May 13, 2014 Posted May 13, 2014 What happens if you install the previous version? javadl.sun.com/webapps/download/AutoDL?BundleId=83383
witch Posted May 13, 2014 Author Posted May 13, 2014 @witch I cant remember If I read it on here or used google but here is how we do it: EDIT: Its was on here : http://www.edugeek.net/forums/windows/129066-setting-java-control-panel-security-gpo.html Copy the 2 files (found after you install JAVA) : deployment.config deployment.properties into c:\windows\sun\java\deployment\ If it doesnt exist create the folder structure If you open deployment.properties in notepad you will see a line: deployment.security.level=MEDIUM This is how the security is set. Levels are MEDIUM,HIGH, VERY HIGH. This will then set security to medium for any user logging on to that machine. Will this work even though the new version states that it is set per user not per machine. If I log on to a machine as admin and set the security to medium, when I log off and log on as a student it has gone back up to high.
computer_expert Posted May 13, 2014 Posted May 13, 2014 (edited) Will this work even though the new version states that it is set per user not per machine. If I log on to a machine as admin and set the security to medium, when I log off and log on as a student it has gone back up to high. It is per system rather than per user. Just deployed JRE7 U55 with medium security settings in the control panel. You can use use group policy preferences to create/copy the files to clients. Edited May 13, 2014 by computer_expert
witch Posted May 14, 2014 Author Posted May 14, 2014 It's all set up now - just got to deploy the GP...
Duke5A Posted May 14, 2014 Posted May 14, 2014 If you run into issues with the GP you can try this: VB Script to set Java security level to medium - Blogs - EduGeek.net I had to implement this last year after Java started to not run unsigned code when its self imposed expiration timer hits.
mikeyd101 Posted May 14, 2014 Posted May 14, 2014 Im just testing this with a GPO and first go I ran into the security problem (set high), I went the modified .MSI route (using orca and changing value [WEB_JAVA_SECURITY_LEVEL] to M) seemed to work and didn't require any extra steps or scripts. I also only found out today that you can update/upgrade with GPO Software Installs, so means updates can be in same GPO rather than creating new one each time, worked a treat for flash and in testing with java atm.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now