I found that a GPO to remove the updater executable worked effectively. Even
if it's enabled, it can't run if it isn't there.
--
There are 10 kinds of people in the world...
those who understand binary and those who don't.
From: [email protected] [mailto:[email protected]] On
Behalf Of Matthew Topper
Sent: Monday, November 16, 2015 9:10 AM
To: [email protected]
Subject: [NTSysADM] RE: Blocking Java, Google, Adobe automagic updaters
I'd suggest using RegShot (http://sourceforge.net/projects/regshot/) for
diffing before/after registry keys if using that method.
I know for Adobe and Google, many of these are actually well documented:
http://www.adobe.com/devnet-docs/acrobatetk/tools/PrefRef/Windows/Updater-Win.html
or https://support.google.com/chrome/a/answer/187207
Chrome even has a .adm file to download
I never found that type of documentation for Java, though.
Matthew Topper
From: [email protected]<mailto:[email protected]>
[mailto:[email protected]] On Behalf Of James Rankin
Sent: Monday, November 16, 2015 9:03 AM
To: [email protected]<mailto:[email protected]>
Subject: [NTSysADM] RE: Blocking Java, Google, Adobe automagic updaters
Couldn't tell you offhand, but what I normally do is
1. Open application
2. Turn on Process Monitor
3. Disable updates through application GUI
4. Switch off Process Monitor
5. Filter process Monitor output by Operation | RegSetValue and Process Name
| whatever.exe
6. Identify the Registry value(s) that turn off the updater functions
7. Deploy through Group Policy Preferences or similar
You can also turn off the Adobe Update functions by using the Adobe
Customization Wizard, so that they're off by default.
I'm assuming you can do the same with Java too
From: [email protected]<mailto:[email protected]>
[mailto:[email protected]] On Behalf Of David McSpadden
Sent: 16 November 2015 13:58
To: [email protected]<mailto:[email protected]>
Cc: Patch Management Mailing List
([email protected]<mailto:[email protected]>)
<[email protected]<mailto:[email protected]>>
Subject: [NTSysADM] Blocking Java, Google, Adobe automagic updaters
I have put in place the GPO's for these but apparently I don't have the right
settings.
Adobe DC Reader and Java update 6v8whatever are trying to update to my internet
PC's.
What should the settings be on the GPO's to stop these autoupdaters from even
running?
This e-mail and any files transmitted with it are property of Indiana Members
Credit Union, are confidential, and are intended solely for the use of the
individual or entity to whom this e-mail is addressed. If you are not one of
the named recipient(s) or otherwise have reason to believe that you have
received this message in error, please notify the sender and delete this
message immediately from your computer. Any other use, retention,
dissemination, forwarding, printing, or copying of this email is strictly
prohibited.
Please consider the environment before printing this email.
