Help with a java issue for students

[tj2419]

Our staff are using a website which they are able to access fine. When students try they get a java error.

 

When the staff access it, they get the following prompt and can click run and the application runs in the browser. When students access it they don't get the message and it errors. I'm guessing this will be a GPO blocking java for students but cannot find where it is.

 

 

Any clues?

 

Thanks

[Michael]

Has the URL been added to the list of exceptions on Control Panel? This can all be scripted (as I've done previously), which makes the solution easier.

 

By default Java exceptions are user based, but you can make them computer based so they apply to any user logging on.

[tj2419]

Has the URL been added to the list of exceptions on Control Panel? This can all be scripted (as I've done previously), which makes the solution easier.

 

By default Java exceptions are user based, but you can make them computer based so they apply to any user logging on.

 

Sorry how/where would I do that? Thanks

[Michael]

As standard (within Control Panel) > Java and there you can specify a list of exceptions (the manual way).

[Helen25]

Have you got GPO stopping students from running command and install functions too?

[kennysarmy]

Quick and dirty copy and paste from our Tech notes in case this helps:

 

 

*****************

 

JAVA normally runs it's security & settings at the user level in order to override this I've created a local folder called:

c:\windows\sun\java\deployment

In this I've added three files:

deployment.config

deployment.Properties

&

exception.sites

 

deployment.config contains the lines:

deployment.system.config=file\:C\:/WINDOWS/Sun/Java/Deployment/deployment.properties

deployment.system.config.mandatory=true

 

deployment.Properties contains the lines:

deployment.user.security.exception.sites=C\:/WINDOWS/Sun/Java/Deployment/exception.sites

deployment.browser.vm.iexplorer.locked

deployment.browser.vm.iexplorer=true

deployment.browser.vm.mozilla.locked

deployment.browser.vm.mozilla=true

deployment.expiration.check.enabled=false

deployment.security.level=HIGH

 

exception.sites contains the line:

http://www.gcsecomputing.org.uk/lmc/lmc_java.html

 

I've also created a startup script which does the following:

The script is called JavaException.bat and is held here:

 

netlogon

 

 

mkdir %SystemRoot%\Sun\Java\Deployment

copy "\\fp2\SHApps\jre1.7.0_51\deployment.config" %SystemRoot%\Sun\Java\Deployment\ /Y

copy "\\fp2\SHApps\jre1.7.0_51\deployment.properties" %SystemRoot%\Sun\Java\Deployment\ /Y

copy "\\fp2\SHApps\jre1.7.0_51\exception.sites" %SystemRoot%\Sun\Java\Deployment\ /Y

 

This script is called via a new policy called JavaExceptionCopyFiles