Elevate the Java updater for standard users

Owned by Anonymous
Last updated: Dec 17, 2015 by Max Pinion (Deactivated)

Download an example policy for elevating the Java updater and installer from the Application Control - Updater Policies data feed (for instructions on how to use data feeds, go to Using Data Feeds).

Enable standard users to update Java without receiving UAC prompts by doing the following steps:

  1. Create a Win32 Executable Filter
  2. Create a new application elevation policy

Create a Win32 Executable Filter

  1. Create a Win32 Executable Filter for jucheck.exe and set the Original file name to "jucheck.exe."
  2. Set the Product name to Java*.
  3. Optionally, you can create a Win32 Executable Filter for jinstall.exe that has the original file name set to jinstall.exe.
  4. Create a Signed File Filter for Oracle/Sun that includes the latest Oracle Digital Signatures.

Create a new application elevation policy

Create an Elevation Policy by following the instructions at Application Control Policy Wizard.

  1. In your policy settings under the Applications to Control tab, target the applications jucheck.exe and jinstall.exe.
  2. Change the Include Only Parameter to the Oracle/Sun Certificate File Filter.
  3. Click the Application Actions tab.
  4. Set the Application Action to Add Administrator Rights - Unrestricted.
  5. Click the Policy Enforcement tab.
  6. Select the Continue enforcing policies for child processes after enforcing this policy check box.
  7. Click Save.