Issue
Standard users are not able to run the Java Update Installer without entering Administrator credentials in UAC.
Solution
Using an Arellia Application Control Policy, standard users can install updates without UAC prompts. To create a recommended application control policy, do the following steps:
Download an example policy for elevating the Java updater and installer from the Application Control - Updater Policies data feed (for instructions on how to use data feeds, go to Using Data Feeds).
- Create a Win32 Executable Filter for jucheck.exe that has the original file name set to "jucheck.exe" and Product Name as: Java*.
- Optionally, you can create a Win32 Executable Filter for jinstall.exe that has the original file name set to jinstall.exe.
- Create a Signed File Filter for Oracle/Sun that includes the latest Oracle Digital Signatures.
- Create a new Application Elevation Policy that targets jucheck.exe and jinstall.exe (optional).
- Change the Include Only Parameter to the Oracle/Sun Certificate File Filter.
- Set the Application Action to Add Administrator Rights - Unrestricted.
- Click the Policy Enforcement tab.
- Under Policy Priority, Select the Continue enforcing policies for child processes after enforcing this policy.
