Page Comparison

Issue

Standard users are not able to run the Java Update Installer without entering Administrator credentials in UAC.

Solution

Using an Arellia Application Control Policy, standard users can install updates without UAC prompts. To create a recommended application control policy, do the following steps:

Enable standard users to update Java without receiving UAC prompts by doing the following steps:

1. Create a Win32 Executable Filter
2. Create a new application elevation policy

Create a Win32 Executable Filter

1. Create a Win32 Executable Filter for jucheck.exe that has and set the original Original file name set to  to "jucheck.exe." and Product Name as:
2. Set the Product name to Java*.
   Image RemovedImage Added
3. Optionally, you can create a Win32 Executable Filter for jinstall.exe that has the original file name set to jinstall.exe.
   Image RemovedImage Added
4. Create a Signed File Filter for Oracle/Sun that includes the latest Oracle Digital Signatures.
   

Create a new

...

application elevation policy

Create an Elevation Policy by following the instructions at Application Control Policy Wizard.

1. In your policy settings under the Applications to Control tab, target the applications jucheck.exe and jinstall.exe (optional).
2. Change the Include Only Parameter to the Oracle/Sun Certificate File Filter.
   Image RemovedImage Added
3. Click the Application Actions tab.
4. Set the Application Action to Add Administrator Rights - Unrestricted.
   Image RemovedImage Added
5. Click the Policy Enforcement tab.
6. Under Policy Priority, Select the Continue enforcing policies for child processes after enforcing this policy check box.
   Image Added
7. Click Save.Image Removed