Java deployment headaches

[googlemad]

We have a e-learning website that requires the very precise version of Java JRE 1.8.0.74, no lower, no higher otherwise the PC checker for the site 'fails' the Java check and lots of users then submit helpdesk tickets.

 

Anyway I've got the Java JRE 1.8.0.74 package from the Oracle site, and tried the following command on my test machine :

 

msiexec /i jre1.8.0_25.msi AUTO_UPDATE=0 EULA=0 NOSTARTMENU=1 SPONSORS=0 WEB_ANALYTICS=0 WEB_JAVA=1 WEB_JAVA_SECURITY_LEVEL=H /qb

 

This works and installs Java fine, but then the following issues need resolving before it is of any use :-

 

(Internet Explorer)

The 'Java™ Plug-In SSV Helper' add-on from 'Oracle America, Inc.' is ready for use.

(Visiting the PC checker website after install) This webpage wants to run the following add-on: 'Java SE Runtime Environment 8 Update 74' from 'Oracle America, Inc.'.

 

Can we allow those automatically through some sort of policy?

 

Then allowing the add on a 'Java Update Needed' dialog pops up straight away saying 'Your Java version is out of date.' (Yes, I know thank you!) - If you click 'Later' this goes away and the PC Checker returns a green tick against Java, hurrah! But I need to disable this out of date dialog if possible...

 

Basically it all needs making as easy as possible for the user to do their e-learning! (Don't even ask why e-learning requires Java in the first place because I really don't know!)

[DarrenShan]

Have you looked at PDQ Deploy? (http://www.pdq.com) costs around £450 per year and well work the investment.

[Arthur]

Can we allow those automatically through some sort of policy?

IIRC, the GPOs you need to look at the located here...

 

Computer Configuration > Administrative Templates > Windows Components > Internet Explorer > Security Features > [b]Add-on Management[/b]

 

https://gpsearch.azurewebsites.net/#455

[LeMarchand]

Can we allow those automatically through some sort of policy?

 

User/Policies/Admin templates/Windows Components/Internet Explorer>"Automatically activate newly installed add-ons=Enabled

 

Enabling "Turn off the Security Settings Check feature" may help with the out-of-date nags.

[Michael]

I'd be asking the e-learning website to update code their end. I think it's ridiculous to expect schools to run a specific Java version - the latest is Java 8 Update 121, so 74 is well out of date.

 

I've had similar problems in the past because websites were only coded to recognise Flash version 9 - anything 10 or above wasn't recognised. We're now up to version 25!

[Arthur]

Enabling "Turn off the Security Settings Check feature" may help with the out-of-date nags.

"Turn off blocking of outdated ActiveX controls for Internet Explorer on specific domains" would probably be a more secure option.

[Arthur]

I think it's ridiculous to expect schools to run a specific Java version

+1. Surely they must know it's a massive security risk?

[googlemad]

I'm going to be doing deployment using Certero AssetStudio which I've never actually used before until this job but seems simple enough

 

The twist is this isn't a school being expected to run a specific Java version, this is the NHS! It is by far the most popular helpdesk call I've seen on the system in the month or so I've been here, and I know even I had a headache trying to complete my mandatory training due to this issue - think the only reason Java is used is because parts of the site use Oracle to track training progress, or something...

[LeMarchand]

+1. Surely they must know it's a massive security risk?

 

They don't care. They know techie concerns will be trumped by "teaching and learning need".

[Natalie_A89]

There must be other tools which enable you to do this easily. It may be worth checking the security systems that are in place as in my experience, this is where the problem lies.

[JasonNVSD]

The 'Java™ Plug-In SSV Helper' add-on from 'Oracle America, Inc.' is ready for use.

These "helpers" are a BHO and unrelated to the plugin. For 99.9% of us they're unneeded and it's best just to remove them. Add this to your install script:

reg delete "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}" /f
reg delete "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}" /f

 

 

...dialog pops up straight away saying 'Your Java version is out of date.'

There's a bunch of update mechanisms, but for this older version adding AUTO_UPDATE=0 to the end of your setup command should be enough. Perhaps try using the .exe like Oracle expects.