PolicyPak
Would you like to react to this message? Create an account in a few clicks or log in to continue.

Java 7 U51 Exlusion List via Policy Pak

2 posters

Go down

Java 7 U51 Exlusion List via Policy Pak Empty Java 7 U51 Exlusion List via Policy Pak

Post  llara@acssyr.com Tue Jan 21, 2014 2:46 pm

Hi,

We are testing the new Java 7 U 51 PAK with CSE 605. We would like to add a list of internal sites to the Java 7 U 51 Policy PAK GPO to be excluded by Java. Can you please explain how should how can we get this accomplished?

Thank you.

llara@acssyr.com

Posts : 4
Join date : 2014-01-21

Back to top Go down

Java 7 U51 Exlusion List via Policy Pak Empty Working on an end-to-end demo...

Post  jeremym Tue Jan 21, 2014 3:34 pm

Working it thru and making a video. Standby.. gonna be a little bit as we test it end to end.

Working on it though. Standby.
jeremym
jeremym

Posts : 82
Join date : 2013-01-29
Location : Philadelphia

Back to top Go down

Java 7 U51 Exlusion List via Policy Pak Empty Here's a video.

Post  jeremym Tue Jan 21, 2014 5:45 pm

Here's a video to explain what's possible TODAY.

We have some ideas for an enhancement to this; but this is as-is today.

http://www.policypak.com/videos/policypak-manage-java-site-exceptions-using-policypak

Post your questions about it here if you have them. Thanks.
jeremym
jeremym

Posts : 82
Join date : 2013-01-29
Location : Philadelphia

Back to top Go down

Java 7 U51 Exlusion List via Policy Pak Empty Re: Java 7 U51 Exlusion List via Policy Pak

Post  llara@acssyr.com Tue Jan 21, 2014 6:11 pm

Hi Jeremy,

Thanks for your answer. Unfortunately we can't deploy this solution because users won't be able to manage their own exception since the file will be overwritten by the original one when the GPP is applied. Any way to control that?

llara@acssyr.com

Posts : 4
Join date : 2014-01-21

Back to top Go down

Java 7 U51 Exlusion List via Policy Pak Empty Clarifying what you want..

Post  jeremym Tue Jan 21, 2014 6:15 pm

I'm confused about what you're asking.

I think what you / most people want is:

1. Centralized deployment (I showed that using GPPrefs.)
2. Centralized management on how to POINT to the file (I showed that using PPAM.)
3. Users UN-able to change what you put down (I didn't show that.)

If you want #3, today: You can manually set file ACLs such that the file is read only.

This is possible using Group Policy's security node ... though not super intuitive.

In the future, we hope that PPAM can do 1,2 and 3 all at the same time.

If I'm misunderstanding what you DO want, can you re-clarify? Thanks !
jeremym
jeremym

Posts : 82
Join date : 2013-01-29
Location : Philadelphia

Back to top Go down

Java 7 U51 Exlusion List via Policy Pak Empty Re: Java 7 U51 Exlusion List via Policy Pak

Post  llara@acssyr.com Tue Jan 21, 2014 6:37 pm

I might be missing something let's say we configure GPP to copy the exception.sites which contains site1 and site2 the file is successfully copied to C:\dest on workstationA

Policy Pak for Java 7 U51 is changed to read the file from C:\dest

now WorkstationA's Java is getting an exception for site1 and site2

That being said, user1 goes to the Java applet and manually adds site3 for workstationA. Now the exception.sites allows site1,site2 and site3 when the user logs off and logs back in to workstationA doesn't the GPP overwrite the exception.sites file with the orginal one which contains just site1 and site2?





llara@acssyr.com

Posts : 4
Join date : 2014-01-21

Back to top Go down

Java 7 U51 Exlusion List via Policy Pak Empty Yes.

Post  jeremym Tue Jan 21, 2014 6:49 pm

If you set the GPPreferences type to CREATE it will deliver once and not re-apply again.

However, that being said, in my video, I'm specifying that all users use the SAME file.

And that might not be what you want.

Based on what I'm hearing you want, you could:

1. Copy the "starter" file using GPpreferences and place in the users' local Appdata. Use Action type CREATE. Something like this: http://screencast.com/t/rSlp2XUxiueZ

2. Then use PPAM, on the *USER* side to point to that same location. PP should accept the variable named %Local AppData% (different that what GPPrefs uses, I'm afraid.) But it should point to the same place.

Result:

1. User logs on: Gets the "starter file" and it's unique to each user who logs on.
2. User gets the file "pointed to".
3. User can change the file AFTER its put down.
4. CREATE action from GPPrefs means its delivered once and not again.

LMK if this feels right to you.

Warning: I haven't tested the environment variables part end to end. So if you're going to do this, start out with c:\DEST\ like I did in the video. Get it?
jeremym
jeremym

Posts : 82
Join date : 2013-01-29
Location : Philadelphia

Back to top Go down

Java 7 U51 Exlusion List via Policy Pak Empty Re: Java 7 U51 Exlusion List via Policy Pak

Post  llara@acssyr.com Tue Jan 21, 2014 7:02 pm

I will be testing with C:\dest and then using the variables. I get back with the results.

llara@acssyr.com

Posts : 4
Join date : 2014-01-21

Back to top Go down

Java 7 U51 Exlusion List via Policy Pak Empty Re: Java 7 U51 Exlusion List via Policy Pak

Post  Sponsored content


Sponsored content


Back to top Go down

Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum