/build/static/layout/Breadcrumb_cap_w.png

Software Deployment Question


Deploying a reg hack via SCCM 2012 R2

04/21/2014 28052 views

I'm having a devil of a time deploying a reghack for JAVA updates. 

I've got the reghack in a SCCM package called scripts. I can install the hack via a batch file manually and it works great but attemps to use either a package or a task sequence have failed. I've tried both of these command lines inside the various packages, TS and even batch/cmd file sinsdie packages or TS:

cmd /c c:\windows\syswow64\regedit.exe /s "java no update.reg"

reg import "java no update.reg"

The second I have used on the machine with a bat/cmd file and the .reg file in the root and it works fine. 

In the packages/TS I have always included the scripts packages. I have tried disabling the 64 bit redirect. They all install but none of the reg changes happen. 

Target machines are Windows 7 SP1 with 32 and 64 bit JAVA 7.21 installed. 

 

Any clues what I am doing wrong or suggestions welcome.

 

 

1 Comment   [ + ] Show comment

Comments

  • I'll bet the registry data is targetted at HKCU? If so, remember that SCCM deploys using the local System account not the logged-in user. Use Active Setup to deply user profile-targetted data in this scenario (i.e. where you don't have a software package with advertised entry-points)
    • No HKLM. See comments below.

All Answers

-1

I am quite sure this is a reg edit, not a hack...

you will have to get SCCM to add the Reg file to the 'package' or run it from source.

Try adding %~dp0 to the path of the reg key:
cmd /c c:\windows\syswow64\regedit.exe /s "%~dp0java no update.reg"

Also, you need to put those keys down in the x86 reg location and the x64 reg location

Answered 04/22/2014 by: Badger
Red Belt

  • Indeed, Java supports disabling updates with the following keys:

    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\JavaSoft\Java Update\Policy]
    "EnableJavaUpdate"=dword:00000000

    [HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Update\Policy]
    "EnableJavaUpdate"=dword:00000000
  • The hack is this:
    Windows Registry Editor Version 5.00

    [HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Update\Policy]
    "EnableJavaUpdate"=dword:00000000
    "NotifyDownload"=dword:00000000
    "NotifyInstall"=dword:00000000
    "Country"="US"
    "PostStatusUrl"="https://sjremetrics.java.com/b/ss//6"
    "UpdateSchedule"=dword:0000000b
    "Frequency"=dword:01010000
    "UpdateMin"=dword:00000024
    "ScheduleId"="S-1-5-21-32445488-1747349121-1390831013"

    [HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Update\Policy]

    "EnableJavaUpdate"=dword:00000000


    [HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Update\Policy]

    "EnableAutoUpdateCheck"=dword:00000000

    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\JavaSoft\Java Update\Policy]

    "EnableJavaUpdate"=dword:00000000

    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\JavaSoft\Java Update\Policy]

    "EnableAutoUpdateCheck"=dword:00000000


    I will try the %~dp0 idea.
 
This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ