Problem
Standard users are not able to run the Java Update Installer without entering Administrator credentials in UAC.
Solution
An example policy for elevating the Java updater and installer can be downloaded from the Application Control - Updater Policies data feed. See Using Data Feeds
Using an Arellia Application Control Policy, standard users can install updates without UAC prompts. Below is a recommended application control policy.
- Create a Win32 Executable Filter for jucheck.exe that has the original file name set to "jucheck.exe" and Product Name as "Java*"
- (optional, allows Java installs from internet) Create a Win32 Executable Filter for jinstall.exe that has the original file name set to "jinstall.exe"
- Create a Signed File Filter for Oracle/Sun that includes the latest Oracle Digital Signatures
- Create a new Application Elevation Policy that targets "jucheck.exe" and "jinstall.exe" (optional)
- Change the Include Only Parameter to the Oracle/Sun Signed File Filter
- Set the Application Action to "Add Administrator Rights - Unrestricted"
- Set the Policy Priority accordingly and enable enforcing policies for child processes