Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have about 20 laptops with Windows Vista or 7. Most, if not all, have Java and Flash installed and those are updated through their upstream update routines, i.e. the user gets prompted that there's an update that should be installed. These users have admin rights and they can install updates when it best suits them. We have no Windows domain or whatever central management. The problem is that with each update Java offers to install an Ask toolbar and Flash offers McAfee something and many or most of our users neglect to unselect them.


  1. that there are security holes that need updating and especially that Firefox even refuses to use a unsecure Java

  2. that we unfortunately need Java and Flash and

  3. that our users cannot be trained to not update when prompted nor unselect stuff when offered

how can we best avoid this crap? Is there a registry key that changes how those updates work? Would an unwritable directory under Program Files fail the installation? Or should I just distribute a post-install batch-script to remove specific files?

share|improve this question
At 20 laptops, it's past time you got a Windows domain in there. – Michael Hampton Feb 15 '13 at 9:00
One word: Ninite. Two words: Ninite Pro. Create a Ninite installer with Java and Flash and script it to run daily. – tombull89 Feb 15 '13 at 9:06

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.