Disabling Java going out to the Internet

(imported topic written by bigfix1191)

Hello All

I’ve used the JRE 1.6.20 fixlet from Windows Update, which has worked a treat in our QA section of Big Fix. What I would like to do now is to disable JRE going out to the Internet.

Looking at Task Manager and a look through search engines there are two processes that I need to get rid of

jqs.exe

jsched.exe

Has anyone had an experience of deleting both of these? At the moment our estate has mutiple versions of JRE, so I want to target the relevance at all users regardless of what version of Java there is.

Thanks

Ben

(imported comment written by cstoneba)

It looks like can you disable the java updater by setting this reg key (http://forum.bigfix.com/viewtopic.php?id=2098)

set “PromptAutoUpdateCheck”=dword:00000000 and “EnableJavaUpdate”=dword:00000000 under

HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Update\Policy

(imported comment written by bigfix1191)

thanks I will give that a whirl

(imported comment written by JackCoates91)

by the way, there’s 32 bit and 64 bit fixlets for this task in Updates for Windows Applications.

(imported comment written by bigfix1191)

thanks Jack I’ve utlised these. Still need to sort out the disabling of the updates though.

Cheers

(imported comment written by JackCoates91)

does that mean they didn’t disable the updates? Because that’s what they’re supposed to do.

(imported comment written by bigfix1191)

Hey Jack

This is the fixlet I am using from the site - Updates for Windows

Java Runtime Environment 6 Update 20 Available (JRE 6 Installed)

Because we have multiple version of JRE across the estate, we would like to disable every Java install requesting updates, so that we have complete control. Hence my I am creating the package. To my knowledge this JRE package that BFix have created doesnt disable updates as the reg key is set to 1 to update.

Ben

(imported comment written by JackCoates91)

Hi Ben,

That fixlet’s primary purpose is to install JRE 6 update 20, and stopping the update service is actually only done temporarily so that they don’t step on each other. I’m actually thinking of these two:

Java Runtime Environment - Disable Java Update

Java Runtime Environment - Disable Java Update (x64)

They toggle the registry flag that tells java update service not to run. I don’t think they’ll work if you’ve got a 32 bit Java on a 64 bit platform, there’s a bug in for that.

(imported comment written by bigfix1191)

thanks for the reply Jack

Java Runtime Environment - Disable Java Update

Java Runtime Environment - Disable Java Update (x64)

I cant see these in the BES Support\Window Update site? Doing a Control-F I still cant get those custom fixlets?

(imported comment written by JackCoates91)

Are you subscribed to “Updates for Windows Applications”? Are you looking in non-relevant as well, just in case?

(imported comment written by bigfix1191)

We are subscribed, but I am not seeing that, neither are my colleagues? We’ve got about 44 fixlets in that site.

(imported comment written by MY6591)

Hi bigfix11,

here is a possible solution: these two are “tasks”, not fixlets in Updates for Windows Application site. when you do control-f, you need to click on the Tasks tab.

Java Runtime Environment - Disable Java Update

Java Runtime Environment - Disable Java Update (x64)

and please make sure you are looking at “All Fixlets and Tasks”, not just “relevant” fixlets and tasks.

hope this helps.

(imported comment written by bigfix1191)

It did - I was looking in Fixlets!

Thanks