Packaging Java

Edu-IT · December 6, 2009

I'm going to need to deploy the latest version of Java. I see that there is an MSI already available for this which is great however I am wondering; is there anything I need to do to stop it from displaying the 'download latest Java' updates that I get on my home machine?

cookie_monster · December 6, 2009

Yes you need to create an mst file to alter certain settings or you can use ORCA to edit the msi.

Edu-IT · December 6, 2009

I've just looked on App Deploy, they say you can use command line arguments?

jre-6uXX-windows-i586-s.exe /s AgreeToLicense=YES IEXPLORER=1 REBOOT=Suppress JAVAUPDATE=0

That will register it in IE, accept the license and disable the update.

I'd prefer to use Orca I think to edit the MSI if I have to take that route, I've not mastered MST files yet. What parts need editing, do you know?

cookie_monster · December 6, 2009

Yep that will probably work. These are the options to edit in the msi if you're using group policy.

Transform:Property:

1. AUTOUPDATECHECK = 0

2. EULA = 1

3. EULA_JAVAFX_ACCEPT = yes

4. IEXPLORER = 1

5. JAVAUPDATE = 0

6. JU=0

7. MOZILLA = 1

8. SYSTRAY = 0

I'm only on update 14 at the moment apparently it's changed slightly for 17, this is on appdeploy.

For JRE 6_17 follow these steps:
------------------------------------------------------------
-Download from:
"https://cds.sun.com/is-bin/INTERSHOP.enfinity/WFS/CDS-CDS_Developer-Site/en_US/-/USD/ViewProductDetail-Start?ProductRef=jre-6u17-oth-JPR@CDS-CDS_Developer"
------------------------------------------------------------
-Extract MSI + CAB from "%USERPROFILE%\Application Data\Sun\Java\jre1.6.0_17"
------------------------------------------------------------
-Create MST or command line with property's:
AUTOUPDATECHECK=0
EULA=1
IEXPLORER=1
JAVAUPDATE=0
JU=0
MOZILLA=1
REBOOT=ReallySuppress
SYSTRAY=0
------------------------------------------------------------
- Add the EULA user info by adding the RegKey/value:
HKCU\Software\JavaSoft\Java Runtime Environment\1.6.0_17\
EULA=1 (REG_DWORD)
I did this by using Active Setup, learn more about this technique on "http://www.etlengineering.com/installer/activesetup.txt"

Edited December 6, 2009 by cookie_monster

Edu-IT · December 6, 2009

Perfect, thanks so much. I take it you've done this and it works?

cookie_monster · December 6, 2009

I've been using this method for over three years from 1.5 to 1.6 update 14 and the msi works flawlessly there was a minor issue with a change in update 13 or 14 but it's all sorted now.

I think the active setup part at the bottom of the quote is new for update 17 but it appears to be explained there.

Edu-IT · December 6, 2009

I can see the values in the Registry using Orca. Just can't find the reboot one?

cookie_monster · December 6, 2009

I can see the values in the Registry using Orca. Just can't find the reboot one?

I can't look untill tomorrow but I think it's under the property table.

Edu-IT · December 6, 2009

Ah. So do I edit the 'Registry' area or the 'Property' area. If you could check, that would be great. Save me a few minutes and a few F words I imagine.

Michael · December 6, 2009

To edit using the registry, this is what you need to import:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Update\Policy]
"EnableJavaUpdate"=dword:00000000

Edu-IT · December 6, 2009

That the only registry change that needs to be made? See CM's earlier post.

Mr.Ben · December 6, 2009

How about just using GPO's to stop jusched.exe from running? - Saves playing with the MSI.

While your at it, stop jqs.exe (The Java Quick Starter) from running to to saves some resources.

Edu-IT · December 6, 2009

I'd much prefer to edit the MSI. It isn't that difficult to do and saves creating and remembering what the separate policies are.

rocknrollstar · December 7, 2009

I've just looked on App Deploy, they say you can use command line arguments?

jre-6uXX-windows-i586-s.exe /s AgreeToLicense=YES IEXPLORER=1 REBOOT=Suppress JAVAUPDATE=0

That will register it in IE, accept the license and disable the update.

I'd prefer to use Orca I think to edit the MSI if I have to take that route, I've not mastered MST files yet. What parts need editing, do you know?

Do you know if this can be done under a system account? I.e. if I run this is a gpo as a script, will everything work ok, or does it need to be done as an admin user logged in? Thanks.

Edu-IT · December 7, 2009

Do you know if this can be done under a system account? I.e. if I run this is a gpo as a script, will everything work ok, or does it need to be done as an admin user logged in? Thanks.

I'm not entirely sure to be honest. I think I'm going to edit the package to be sure.

cookie_monster · December 7, 2009

Hmmm odd. I've downloaded jre-6u17-windows-i586.exe from Sun (the version without the Yahoo toolbar) and extracted it, I've put the jre1.6.0_17.msi and Data1.cab files in the deployment folder and set it to deploy but it fails to finish installing. It fails with and without the mst file.

EDIT

I grabbed the version with the toolbar and unpacked that, this one comes with an mst of it's own. I applied the mst in Orca and added my settings then generated a new mst file. This appears to of worked.

I'll do some testing.

Edited December 7, 2009 by cookie_monster

cookie_monster · December 7, 2009

Well I've edited the msi directly with the settings below but it doesn't appear to work.

Transform:Property:

AUTOUPDATECHECK = 0

EULA = 1

IEXPLORER = 1

JAVAUPDATE = 0

JU=0

SYSTRAY = 0

This is how the registry looks with those settings so for some reason it's not obeying the fields in the msi.

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Update\Policy]
"EnableJavaUpdate"=dword:00000001
"NotifyDownload"=dword:00000001
"NotifyInstall"=dword:00000000

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Plug-in\1.6.0_17]
"JavaHome"="C:\\Program Files\\Java\\jre6"
"UseJava2IExplorer"=dword:00000001
"UseNewJavaPlugin"=dword:00000001
"HideSystemTrayIcon"=dword:00000001

sparkeh · December 7, 2009

I had a hell of time trying to disable the updater last time I tried this (I did exactly what CM did above).

The but the weird thing was (with the version I was using, might be newer version now) that java appeared to have two ways to update itself. You seem to be able to stop jre updating itself but the jusched.exe gets installed which also updates java (if you see what I mean) and I can't figure out a way to stop this.

In the end I just used gpo to stop jusched.exe running.

cookie_monster · December 7, 2009

Interestingly there is another key that I hadn't seen that contains the settings from the msi but the two above keys still show the same settings. It's all a bit odd.

dows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.6.0_17\MSI]
"JU"="0"
"OEMUPDATE"=""
"MODE"="C"
"FROMVERSION"="NA"
"KERNEL"=""
"PRODUCTVERSION"="6.0.170"
"INSTALLDIR"="C:\\Program Files\\Java\\jre6\\"
"SYSTRAY"="0"
"EULA"="1"
"IEXPLORER"="1"
"MOZILLA"="0"
"JAVAUPDATE"="0"
"AUTOUPDATECHECK"="1"
"AUTOUPDATEDELAY"=""
"ImageCkSum"="3407744024"
"FullVersion"="1.6.0_17-b04"

I think I need to find the way to change this key "AUTOUPDATECHECK"="1"

Right I've found that and set it to 0 so we'll see.

Edited December 7, 2009 by cookie_monster

cookie_monster · December 7, 2009

Ok it now looks like below, I think I'll just have to see what happens none of the settings seem to affect the policy key "HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Update\Policy]".

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.6.0_17\MSI]
"JU"="0"
"OEMUPDATE"=""
"MODE"="C"
"FROMVERSION"="NA"
"KERNEL"=""
"PRODUCTVERSION"="6.0.170"
"INSTALLDIR"="C:\\Program Files\\Java\\jre6\\"
"SYSTRAY"="0"
"EULA"="1"
"IEXPLORER"="1"
"MOZILLA"="0"
"JAVAUPDATE"="0"
"AUTOUPDATECHECK"="0"
"AUTOUPDATEDELAY"=""
"ImageCkSum"="3407744024"
"FullVersion"="1.6.0_17-b04"

DMcCoy · December 7, 2009

I use the group policy preferences to set the EnableJavaUpdate to 0. Sun would rather you paid for Java business edition I suspect.

cookie_monster · December 7, 2009

I use the group policy preferences to set the EnableJavaUpdate to 0. Sun would rather you paid for Java business edition I suspect.

Yep that's about what I'm about to resort to. It's sooo anoying that they keep changing the damn thing.

TBH now I've looked I can see that this was set on update 14 that I've been running for ages and I've never seen it try to update while an ordinary user is logged on.

Edu-IT · December 7, 2009

So, to summarise, I'm best not to attempt to do what I wanted to do originally as it doesn't work?

cookie_monster · December 7, 2009

So, to summarise, I'm best not to attempt to do what I wanted to do originally as it doesn't work?

I'd still alter the msi to add the "IEXPLORER"="1" section and the systray one, in fact i'd still do them all then finally either import that reg key or set it with group policy preferences (if you have server 2008).

sted · December 7, 2009

deploying java works fine (as long as you use an mst or it dosent register with ie/firefox) but disabling the updater is a black art sometimes it work sometimes it dosent.

Its also worth disabling the javawebstart service as sometimes that can cause issues upgrading/removing it at a later date as it can hang for 20 minutes or more trying to deploy

Packaging Java

Recommended Posts

Edu-IT

cookie_monster

Edu-IT

cookie_monster

Edu-IT

cookie_monster

Edu-IT

cookie_monster

Edu-IT

Michael

Edu-IT

Mr.Ben

Edu-IT

rocknrollstar

Edu-IT

cookie_monster

cookie_monster

sparkeh

cookie_monster

cookie_monster

DMcCoy

cookie_monster

Edu-IT

cookie_monster

sted

Create an account or sign in to comment

Create an account

Sign in

Recent Threads

iOS 27 BYOD and Smoothwall web filtering - Connectivity Assist causing issues?

3rd Party Warranty on Existing Panels

Edge Auto Sign in Broken / Cloud Filter

Home

Forums

What's New