Software Deployment

You should find that in earlier versions of J2SE (i.e., 1.5.0_07), setting the aforementioned MSI properties WILL NOT untick the automatic updates box in the control panel. However, you will find that the MSI will not add an entry to HKCU\..\Run for the jusched.exe to load on startup, which means that the update settings will be irrelevant. As such, updates will not come down to the PC, despite the tick in the update box. If you install over the top of earlier versions -- of the same major and minor versions, but different patch level -- the settings will be retained from that earlier version *I think*.

Just a few Notes from my experience with Packaging Java 6 J2SE 1.6.0.0 for the benefit of everyone.

My project got postpned until March 08, so I'll see then what version our manufacturer will suggest by then, but here is what I ran accross with v1.6.0.0
.
Error 1606 ... When running the MSI with the /qn swithch -- Here are some comments and a work around from the Sun forum (http://forum.java.sun.com/thread.jspa?forumID=14&threadID=5116527)
There is a bug with 1.6.0.0. I assume it may already be taken care of in updates 1 - 3.
The /qb! and /qn seem to work fine.

Automating the package:
Beyond the error specified above, I discovered the following in my test lab:

Java 6 (and earlier versions as 1.4.0.06 that I have tested) store configuration data in the following "deployment.properties" file. Here are the notes I took during testing:

The deployment.properties file contains some specific customizations to some of Java's control panel settings. These configuration settings include the Java Runtime Parameters (Java console Advanced Tab), and other Internet Explorer/Java related settings that can be set via Internet Explorer advance settings.
Configure a PC with the proper standard settings that you would like and then copy the following file and keep it for future deployments:
C:\Documents and Settings\[user profile here]\Application Data\Sun\Java\Deployment\deployment.properties
When you need to deploy Java 6 plug-ins to other machines, place this file in the same location for each user

Some registry key settings and values my be set as a result of the infomation contained in this file. Although this may be a redundant step, the registry keys desired should be verified. There are some values that I could not find in the registry which were contained in this file.

NOTE: A properly configured "deployment.properties" file will ensure the dreaded autoupdate and schedule check box do not appear as checked in teh Java console even after you have disabled it with the proper registry key values.

Registry Keys

Our company's requirements are to have a specific parameters string in the Java console "Advanced tab". We defininely want automatic updates shut off, not icon on the desktop and system tray, uncheck IE as the default browser (don't know why), and disable prompting for users to update the software.

NOTE: If you disable automatic updates and still see the checkbox in the Java console, configure a machine to the way you want it to be configured in the Control Panel > Java Plug-in console, then save the "deployment.Properties" file and use it in your deployments (See notes above).

Again, this file may already handle the registry chages seen below, but I have not verified it because my project got postponed until next March and I need to move on quickly to the next project. What I would suggest, is to look at the registry keys below (either manually or with a scanning tool), configuring Java through the Control Panel > Java Plug-ins console (this will update the "deployment.properties" file), and then see if the registry keys have changed. If so, then all you need to do is use the "deployment.properties" file and you are done!

These Reg Keys were added when I customized the package:

[HKEY_CURRENT_USER\Software\JavaSoft\Java Update\Policy]
"EnableAutoUpdateCheck"=hex:01,00,00,00,d0,8c,9d,df,01,15,d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,01,4b,14,7f,16,5c,95,42,8a,7f,78,a9,aa,c0,9f,16,00,00,00,00,1c,00,00,00,50,00,61,00,73,00,73,00,77,00,6f,00,72,00,64,00,20,00,44,00,61,00,74,00,61,00,00,00,03,66,00,00,a8,00,00,00,10,00,00,00,60,1a,0f,76,84,0d,70,e0,65,52,72,c5,02,66,4a,24,00,00,00,00,04,80,00,00,a0,00,00,00,10,00,00,00,30,d4,38,af,a7,c0,76,c8,a4,5e,a7,e8,bb,1c,02,bd,08,00,00,00,c4,9b,bf,af,5c,6c,de,19,14,00,00,00,c9,da,ab,14,27,d8,f5,bd,e6,76,17,35,b1,73,55,99,4b,35,cd,61,

These Reg Keys were modified:

[HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Plug-in\1.6.0]
"UseJava2IExplorer"=dword:00000000
[HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Plug-in\1.6.0]
"HideSystemTrayIcon"=dword:00000001

The following keys were deleted:

[HKEY_CLASSES_ROOT\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\TreatAs]

[HKEY_CLASSES_ROOT\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\TreatAs]
@="{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBB}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\TreatAs]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\TreatAs]
@="{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBB}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AdvancedOptions\JAVA_SUN]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AdvancedOptions\JAVA_SUN]
"Text"="Java (Sun)"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AdvancedOptions\JAVA_SUN]
"Type"="group"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AdvancedOptions\JAVA_SUN]
"Bitmap"="C:\\Program Files\\Java\\jre1.6.0\\bin\\regutils.dll,1000"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AdvancedOptions\JAVA_SUN\SELECT]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AdvancedOptions\JAVA_SUN\SELECT]
"RegPath"="Software\\JavaSoft\\Java Plug-in\\1.6.0"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AdvancedOptions\JAVA_SUN\SELECT]
"Text"="Use JRE 1.6.0 for <applet> (requires restart)"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AdvancedOptions\JAVA_SUN\SELECT]
"Type"="checkbox"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AdvancedOptions\JAVA_SUN\SELECT]
"ValueName"="UseJava2IExplorer"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AdvancedOptions\JAVA_SUN\SELECT]
"HKeyRoot"=dword:80000002
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AdvancedOptions\JAVA_SUN\SELECT]
"CheckedValue"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AdvancedOptions\JAVA_SUN\SELECT]
"DefaultValue"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AdvancedOptions\JAVA_SUN\SELECT]
"UncheckedValue"=dword:00000000
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}]
"MenuText"="Sun Java Console"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}]
"CLSID"="{1FBA04EE-3024-11d2-8F1F-0000F87ABD16}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}]
"ClsidExtension"="{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.6.0\\bin\\jusched.exe\""

This information would best serve the community if it were copied to the Package KB. If you've already done that, great: I apologise for disturbing you. If you haven't, you know what you must do... :)

From here: http://www.appdeploy.com/packages/detail.asp?id=38

WEBSTARTICON - set to 0 - removes webstart icon on desktop

SYSTRAY - set to 1 - (which is default) puts coffee cup icon in Systray when applets run

JAVAUPDATE - set to 0 - I don't want users being prompted to update the JRE I am trying hard to standardize!

you can use those properties on the commandline to do just that. my MSI commandline is: ALLUSERS=1 REBOOT=REALLYSUPPRESS WEBSTARTICON=0 JAVAUPDATE=0 SYSTRAY=0

Does this setting JavaUpdate to 0 work for all versions? I think I did this on Java 5 Update 11 and it did not uncheck the automatically check for updates box.

I have Java 5.0 Update 10 deployed to my organization and in my transform have the following options:

InstallExecuteSequence Table
CreateShortcuts (2150) removed

Property Table
EULA, 1
IEXPLORER, 1
JAVAUPDATE, 0
AUTOUPDATECHECK, 0
MOZILLA, 1
RebootYesNo, No
WEBSTARTICON, 0

My Java does not auto update.

I would be interested in knowing if there are differences in the behavior from update 10 to update 11 which nullify the transform I prepared.

Using a transform like you do is just another way of setting the same property. Although I haven't tested this myself from what's been said here you could draw the conclusion that your transfrom won't work.

But that of course would be easy to verify in your testing environment!

There have been times where I have assumed something to work, and skimped on testing. Sooner or later I'd be testing anyways, to patch up the mess I created =)

dlernstrom - quick question. When you turn off autoupdate and javaupdate, does this uncheck the Automatically Check for Updates box? When I turned both of these features to 0, the box stayed checked.

Jib,

You are absolutely correct in that if you skimp on testing, screwups are abundant. I test everything using virtual machines via VMWare. As I mentioned before, I have deployed Java 5.0 Update 10 and my transform works.

[hr]

dpolishsensation,
In Java 5.0 Update 10, the transform does uncheck the 'Automatically Check for Updates' box. I haven't checked for Update 11, but am tempted to upgrade all of the Java at our site just to examine the behavior.

In my test lab, I also use a valuable FREE tool called RegShot for those times that I need to examine the implications of changing an option within a program. The program examines the registry at its current state and takes a snapshot of it, you impliment a change, and then immediately take another snapshot. The tool examines both snapshots and does a differential comparison.

Using the above mentioned method, I opened up my Java through the control panel, selected the appropriate tab, and performed a snapshot. I hit 'auto check for updates' and then apply. Next, I took another shapshot. Here are my results:

DISABLING AUTO UPDATE AFFECTED THE FOLLOWING REGISTRY KEYS:
----------------------------------
Values deleted:1
----------------------------------
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\SunJavaUpdateSched: ""C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe""

----------------------------------
Values added:1
----------------------------------
HKEY_USERS\S-1-5-21-3240312919-1883340450-2732008074-1298\Software\JavaSoft\Java Update\Policy\EnableAutoUpdateCheck: 01 00 00 00 D0 8C 9D DF 01 15 D1 11 8C 7A 00 C0 4F C2 97 EB 01 00 00 00 A2 E6 1E 5C 57 2F 22 41 96 72 60 78 58 C5 6F B7 00 00 00 00 1C 00 00 00 50 00 61 00 73 00 73 00 77 00 6F 00 72 00 64 00 20 00 44 00 61 00 74 00 61 00 00 00 03 66 00 00 A8 00 00 00 10 00 00 00 DB DD D3 CD E3 31 83 25 B6 A1 0F D4 1A FC 9C 8F 00 00 00 00 04 80 00 00 A0 00 00 00 10 00 00 00 FB 65 1D D4 E9 46 8D 0A AD 0F 10 18 15 85 05 EA 08 00 00 00 8D B6 6A AC 2F 54 A9 BE 14 00 00 00 34 0C 6A 77 BA 69 D9 21 46 7D CF 09 96 61 49 45 40 6D 01 28

ENABLING AUTO UPDATE MODIFIED THE FOLLOWING KEYS:
----------------------------------
Values deleted:1
----------------------------------
HKEY_USERS\S-1-5-21-3240312919-1883340450-2732008074-1298\Software\JavaSoft\Java Update\Policy\EnableAutoUpdateCheck: 01 00 00 00 D0 8C 9D DF 01 15 D1 11 8C 7A 00 C0 4F C2 97 EB 01 00 00 00 A2 E6 1E 5C 57 2F 22 41 96 72 60 78 58 C5 6F B7 00 00 00 00 1C 00 00 00 50 00 61 00 73 00 73 00 77 00 6F 00 72 00 64 00 20 00 44 00 61 00 74 00 61 00 00 00 03 66 00 00 A8 00 00 00 10 00 00 00 DB DD D3 CD E3 31 83 25 B6 A1 0F D4 1A FC 9C 8F 00 00 00 00 04 80 00 00 A0 00 00 00 10 00 00 00 FB 65 1D D4 E9 46 8D 0A AD 0F 10 18 15 85 05 EA 08 00 00 00 8D B6 6A AC 2F 54 A9 BE 14 00 00 00 34 0C 6A 77 BA 69 D9 21 46 7D CF 09 96 61 49 45 40 6D 01 28

----------------------------------
Values added:1
----------------------------------
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\SunJavaUpdateSched: ""C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe""


Conclusively speaking, if you want to do some sort of registy hack, use the above registry changes to impliment your particular setting (in JRE1.5.0_10). However, if you want to use the transform, use what I initally suggested.

-David

Create a vbscript custom action that runs very late in the execute sequence.

const HKEY_LOCAL_MACHINE = &H80000002
strComputer = "."
Set oReg=GetObject( _
"winmgmts:{impersonationLevel=impersonate}!\\" &_
strComputer & "\root\default:StdRegProv")
strKeyPath = "SOFTWARE\JavaSoft\Java Update\Policy"
strValueName = "EnableJavaUpdate"
oReg.SetDWORDValue _
HKEY_LOCAL_MACHINE,strKeyPath,strValueName,00000000


Hi guys,
Just a quick observation.
When you're checking to see if the Autoupdate has been switched off make sure you are doing it for a locked down user. Sometimes it has worked but you don't see it till you log off and back on as a locked down user. The admin or installing account sometimes doesn't see the changes.

Yes, I noticed that as well with disabling autoupdate using the internal property values. Using the registry fix I note above, it works everytime.

ORIGINAL: turbokitty

Create a vbscript custom action that runs very late in the execute sequence.

const HKEY_LOCAL_MACHINE = &H80000002
strComputer = "."
Set oReg=GetObject( _
"winmgmts:{impersonationLevel=impersonate}!\\" &_
strComputer & "\root\default:StdRegProv")
strKeyPath = "SOFTWARE\JavaSoft\Java Update\Policy"
strValueName = "EnableJavaUpdate"
oReg.SetDWORDValue _
HKEY_LOCAL_MACHINE,strKeyPath,strValueName,00000000



Thanks, I found this very helpful. I simplified it a bit for my needs though:

Dim objRegistry : Set objRegistry = GetObject("winmgmts:{impersonationLevel=impersonate,authenticationLevel=pktPrivacy}!\\.\root\default:StdRegProv")
objRegistry.SetDWORDValue &H80000002,"SOFTWARE\JavaSoft\Java Update\Policy","EnableAutoUpdateCheck",00000000
objRegistry.SetDWORDValue &H80000002,"SOFTWARE\JavaSoft\Java Update\Policy","EnableJavaUpdate",00000000

I know it's better VBscript form to use those variables and the constant for HKLM, but I want as little code as possible for my logon scripts. This one will save me from countless calls and emails about that annoying little popup in the system tray. Thanks again to everyone here for the tip.

I am using the javaupdate=0 switch for 1.6.0_01 but it still appears in the Java control panel. Has this changed in this version?

Remember the Property value "JU=0" this one is needed to supress autoupdates. This one seems to be used if you are logged in with adminrights, even if you have set AUTOUPDATES=0 and AUTOUPDATECHECK=0.
Check this link http://itninja.com/link/silent-installation

/MN

Hi folks,
please read this tread carefully! The answer lies in there!
Shortly: The properties won't do it, because a Custom Action will overwrite whatever you set! You need a Custom Action, like turbokitty suggested.
Regards, Nick

Okay I'm trying to kill auto updates on JRE 6 Update 1.

I went through the same process that turbokitty suggested by doing a snapshot before unchecking the checkbox...I captured the entry that it put in and created a custom action at the very end of the install. I also removed the entry from the Run key.

After my installation, the auto update checkbox was still checked....I went to the registry to see if my custom action worked and it did lay down the appropriate key and remove the Run key....so I renamed the "EnableAutoUpdateCheck" key to EnableAutoUpdateCheck2" then unchecked the box again....it recreated the "EnableAutoUpdateCheck" key but this time the Hex value was different than before....

NOTE: I installed the package on a different machine than the one I originally got these keys from....is Java generating a hex value based on the hardware??

Please help, I'm about to throw my machine against the wall!! [:@]

Hey daeddilus,

the solution is in Nick's post. Do the CA to change the reg-key.


AD

Hi All,
I was working on JRE 1.6 update version. I was unable to disable the update option in JAVA CONTROL PANEL. By adding AUTOUPDATECHECK=0, JU=0,JAVAUPDATE=0.
and also I have deleted the registry SUNJAVAUPDATESCHED from HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN.
But all these options were failed to disable the update option.

please guyz can u provide any solution to dis issue................I need ur help ASAP............

Hi Chandu,
with version 1.6.0.2 this properties finally seem to work!
However, this are only variables for the Custom Action in the MSI which sets the real regkeys.
The registry keys, that really toggle this, lie here:
HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Update\Policy
EnableJavaUpdate + NotifyDownload are the values, that affect this.
If you set JAVAUPDATE=0, after the Installation "EnableJavaUpdate" should also be set to "0".
Regards, Nick

Yes it does NOT work. Do a search. Use a CA with a VB script that flips the reg key necessary.