Skip to main content

Java 7 update 21 (1.7.0_21) Enterprise Repackaged Security Medium Deployment with SCCM

-------------------------------------------------------------------------------------------------
Java 7 update 45 Enterprise deployment complete walk through
http://www.syswow64.co.uk/2013/10/java-7-update-45-enterprise-deployment.html
--------------------------------------------------------------------------------------------------

The issue on many blogs and articles is around creating the 'deployment.config' and 'deployment.properties' files for an enterprise deployment.  In my case i wanted to set the security level to 'Medium', but everytime I open the Java control panel it was set to the default HIGH setting.


Solution

1 Create the following directory path 'C:\Windows\sun\java\deployment'
2 Create a file called 'deployment.config' in this directory and open with Notepad.
Copy the two line below

####################
deployment.system.config = file\:\\C\:\\WINDOWS\\Sun\\Java\\Deployment\\deployment.properties
deployment.system.config.mandatory = true
####################

3 Create a file called 'deployment.properties' in this directory and open with Notepad.
Copy the four line below (# deployment.security.level.locked optional)

######################
deployment.security.level=MEDIUM
deployment.browser.path=C:\Program Files\Internet Explorer\IEXPLORE.EXE
deployment.version=7.21
#deployment.security.level.locked
###########################
(without path and version, level will be ignored)

4 Delete C:\Users\%Username%\AppData\LocalLow\Sun

5 Delete: HKEY_CURRENT_USER\Software\AppDataLow\Software\JavaSoft\DeploymentProperties

6 Open Java from Control Panel.  You will find the security is now set to MEDIUM. If the lock was imposed, the user will not be able to adjust this setting as it will be greyed out.

Comments

  1. Jonathan,

    Thanks for this solution. It work on Win7x86 with Java 1.7 update 21 (32 bit) but the deployment.security.level=MEDIUM setting won't take effect on Win7x64 with Java 1.7 update 21 (32bit). Is there any update?

    Thanks,
    Reza Prawirasatya

    ReplyDelete
    Replies
    1. http://www.syswow64.co.uk/2013/10/java-7-update-45-enterprise-deployment.html
      Review my latest post as the deployment security can be handled in an MST file.

      Property: WEB_JAVA_SECURITY_LEVEL
      Value: H

      Delete
    2. The default setting is H so setting it is meaningless. Try using M on 7u21 and let me know if it works or if you can get system level deployment to work. Unfortunately I have to work with this version.

      Delete
  2. This comment has been removed by a blog administrator.

    ReplyDelete
  3. This comment has been removed by a blog administrator.

    ReplyDelete
  4. The issue on many blogs and articles is around creating the 'deployment.config' and 'deployment.properties' files for an enterprise deployment. In my case i wanted to set the security level to 'Medium', but everytime I open the Java control panel it was set to the default HIGH setting.
    Investment research outsourcing

    ReplyDelete
  5. I have read your article; it is very informative and helpful for me. I admire the valuable information you offer in your articles. Thanks for posting it. Psychic Medium

    ReplyDelete
  6. I feel very grateful that I read this. It is very helpful and very informative and I really learned a lot from it. security company

    ReplyDelete
  7. Good to become visiting your weblog again, it has been months for me. Nicely this article that i've been waited for so long. I will need this post to total my assignment in the college, and it has exact same topic together with your write-up. Thanks, good share. security company

    ReplyDelete
  8. Toll free QuickBooks phone number support or QuickBooks phone number support
    type on Google and get our experts on call, they took the connect your QuickBooks with their computer and resolve all your users on call.

    ReplyDelete
  9. This is exactly what I was looking for. Thanks for sharing this great article! That is very interesting Smile I love reading and I am always searching for informative information like this! Link’s Locksmith Services 904-615-8397 is located at 903 Candlebark Dr, Jacksonville, FL 32225

    ReplyDelete
  10. Took me time to read all the comments, but I really enjoyed the article. It proved to be Very helpful to me and I am sure to all the commenters here! It’s always nice when you can not only be informed, but also entertained! Serious Security Melbourne

    ReplyDelete
  11. Do you want to lead tiktok profile about java? You can get many followers from this site https://viplikes.uk/tiktok/tiktok-followers/ for your blog

    ReplyDelete
  12. Excellent read, Positive site, I have read a few of the articles on your website now, and I really like your style.
    ecommerce solutions services


    ecommerce services provider in india

    ReplyDelete
  13. Just read your post and would like to thank you for maintaining such a cool blog.
    debt relief order online application

    ReplyDelete
  14. Thanks a lot. This is exactly the same kind of information I was looking for. What is a Kenya visit visa for Indian ? It is a necessary travel document for all the Indian Citizens who want to travel to kenya. And the Kenya visa fee for Indian citizens is updated now and you can also check the official website .


    ReplyDelete

Post a Comment

Popular posts from this blog

Windows 7 Offline files will not go Online when connected to network

Issue Several laptop users move between networks, domain, home, etc and when they attempt to access DFS shares explorer status is working offline.  The issue only resolves it self after a reboot. Connecting directly to the share works and i am able to ping network resources.  This behavior occurs for VPN users as well. Possible Causes "slow-link mode". In win7 (with default settings) a client will enter slow-link mode if the latency to the server is above 80ms. In slow-link mode all writes are made to the local cache and a background sync only happens every 6 hours.  Depending on your connection the default slow link detection speed is 64,000 bps On client computers running Windows 7 or Windows Server 2008 R2, a shared folder automatically transitions to the slow-link mode if the round-trip latency of the network is greater than 80 milliseconds, or as configured by the "Configure slow-link mode" policy. After transitioning a folder to the slow-link mode, Offline Fil

SCCM Unknown computer not able to see Task Sequences after installing Current Branch 1702

Soon after installing SCCM CB 1702 we were unable to see Task Sequences deployed to the unknown collection. This issue was identified as a random system taking the GUID of the 'x64 Unknown Computer (x64 Unknown Computer)' record. As a result it was now a known GUID; as we were only deploying Task Sequences to the Unknown collection none were made available. 'x64 Unknown Computer (x64 Unknown Computer)' record 'x86 Unknown Computer (x86 Unknown Computer)' record To get the GUID of your unknown systems open SQL management studio and run the following command: --Sql Command to list the name and GUID for UnknownSystems record data select ItemKey, Name0,SMS_Unique_Identifier0 from UnknownSystem_DISC Using the returned GUID (SMS_Unique_Identifier0) we can find the hostname that has been assigned the 'x64 Unknown Computer (x64 Unknown Computer)' GUID by running the query below. --x64 Unknown Computers select Name0,SMS_Unique_Identifier0,Decommissioned0 from Sys

SCCM Client Certificate (PKI) Value is None

SCCM Client Certificate (PKI) Value is None Symptoms: Are you seeing the following errors logged? ClientIDManagerStartup.log - Error: 0x87d00231 [RegTask] - Client is not registered. Sending registration request for GUID:12345678...98C1AE ... RegTask: Failed to send registration request message. Error: 0x87d00231 ClientIDManagerStartup RegTask: Failed to send registration request. Error: 0x87d00231 ClientIDManagerStartup LocationServices.log Failed to send management point list Location Request Message to SiteServer.Domain.local 1 assigned MP errors in the last 10 minutes, threshold is 5. CcmMessaging.log Status Agent hasn't been initialized yet. Attempting to create pending event. Successfully queued event on HTTP/HTTPS failure for server 'SiteServer.Domain.local'. Post to https://SiteServer.Domain.local/ccm_system_windowsauth/request failed with 0x87d00231. Failed to open to WMI namespace '\\.\root\ccm' (80041003) Failed in WinHtt