Problem
Standard users are not able to run the Java Update Installer without entering Administrator credentials in UAC.
Solution
Using an Arellia Application Control Policy, standard users can install updates without UAC prompts. Below is a recommended application control policy.
- Create a Win32 Executable Filter for jucheck.exe that has the original file name set to "jucheck.exe" and Product Name as "Java*"
- (optional, allows Java installs from internet) Create a Win32 Executable Filter for jinstall.exe that has the original file name set to "jinstall.exe"
- Create a Signed File Filter for Oracle/Sun that includes the latest Oracle Digital Signatures
- Create a new Application Elevation Policy that targets "jucheck.exe" and "jinstall.exe" (optional)
- Change the Include Only Parameter to the Oracle/Sun Signed File Filter
- Set the Application Action to "Add Administrator Rights - Unrestricted"
- Set the Policy Priority accordingly and enable enforcing policies for child processes
