Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Java is constantly prompting users to upgrade and, when they do, it tries to install all sorts of other things which we must uninstall. Lately it installs a backup program called Carbonite.

We’ve banned Java unless the user has a specific reason why they need it. Those people are getting upgrade prompts with “ride along” software.

How can we stop this?

  • What site is it contacting to see if there’s an upgrade? It should be easy to block that at the firewall. (We did the same thing with RealPlayer.)
  • Is there a registry entry or group policy that can stop it?
share|improve this question
+1 because I feel your pain. Managing Java on a network can be a right headache - I've come to the conclusion myself that it's primarily a developer's plaything and not really suitable for corporate desktop use. – Le Comte du Merde-fou Aug 19 '09 at 23:17
> We’ve banned Java unless the user has a specific reason why they need it. I know this post is old. Hoping you still monitor this account. I'm curious how this has worked for you. We are considering blocking Java also. – Jeff Malone Apr 2 '11 at 2:27
This did work, although we don’t do it any more. The current Java updates seem less-obnoxious. – Nate Apr 4 '11 at 19:32
up vote 4 down vote accepted

To disable the auto-update notification you should be able to set the dword value at HKLM\SOFTWARE\JavaSoft\Java Update\Policy\EnableJavaUpdate to 0 and HKLM\SOFTWARE\JavaSoft\Java Update\Policy\NotifyInstall to 0.

Here is a fragment from on of my startup scripts.

Option Explicit

Dim oShell
Set oShell = WScript.CreateObject("WScript.Shell")


Function DisableJavaUpdateNotification
    Dim Key,Value
    Key="HKLM\SOFTWARE\JavaSoft\Java Update\Policy\EnableJavaUpdate"
    oShell.RegWrite Key,Value,"REG_DWORD"
    Key="HKLM\SOFTWARE\JavaSoft\Java Update\Policy\NotifyInstall"
    oShell.RegWrite Key,Value,"REG_DWORD"
End Function
share|improve this answer
Thanks Zoredache. I’m testing this now and will add it to our GPOs tonight. – Nate Aug 19 '09 at 22:19
Looking at that registry key I also found a key called PostStatusUrl set to — is there any reason why I shouldn’t block – Nate Aug 19 '09 at 22:26
Don't know about blocking, It might be worth trying, but I would probably try it in a testing environment first. – Zoredache Aug 19 '09 at 22:35

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.