Java is the main one – seen occasional vendors that required a specific version of Adobe Reader (but was at a loss to explain why). More excuses to not provide support I think.
But yes, Chrome/Acrobat/Flash/etc. – get ‘em updated. We even let virtualized instances of Chrome update themselves. From: [email protected] [mailto:[email protected]] On Behalf Of Richard Stovall Sent: 16 November 2015 14:33 To: [email protected] Subject: Re: [NTSysADM] Blocking Java, Google, Adobe automagic updaters Understood. I totally get that there are valid reasons to retain old versions of Java for some very specific use cases. But Reader/Acrobat? Chrome? And heaven forbid, Flash? On Mon, Nov 16, 2015 at 9:26 AM, James Rankin <[email protected]<mailto:[email protected]>> wrote: Unfortunately there are myriad apps out there that either a) won’t work, or b) won’t be supported by their half-assed vendors on the latest version of Java Browsium and FSLogix both have solutions that can run specific Java versions for specific URLs or web apps. Neither of these products would exist if the vendors of these awful Java apps got their collective fingers out. From: [email protected]<mailto:[email protected]> [mailto:[email protected]<mailto:[email protected]>] On Behalf Of Richard Stovall Sent: 16 November 2015 14:24 To: [email protected]<mailto:[email protected]> Cc: Patch Management Mailing List ([email protected]<mailto:[email protected]>) <[email protected]<mailto:[email protected]>> Subject: Re: [NTSysADM] Blocking Java, Google, Adobe automagic updaters <Devil's advocate> If you don't have a robust strategy for keeping these applications updated, you might be better off letting them auto-update. If you've got Internet-connected PCs running these applications, you're just asking to get bitten if you don't keep them up to date. A managed strategy with reporting is best, but auto-updating is better than nothing (and certainly better than willfully keeping them out of date.) </> On Mon, Nov 16, 2015 at 8:57 AM, David McSpadden <[email protected]<mailto:[email protected]>> wrote: I have put in place the GPO’s for these but apparently I don’t have the right settings. Adobe DC Reader and Java update 6v8whatever are trying to update to my internet PC’s. What should the settings be on the GPO’s to stop these autoupdaters from even running? This e-mail and any files transmitted with it are property of Indiana Members Credit Union, are confidential, and are intended solely for the use of the individual or entity to whom this e-mail is addressed. If you are not one of the named recipient(s) or otherwise have reason to believe that you have received this message in error, please notify the sender and delete this message immediately from your computer. Any other use, retention, dissemination, forwarding, printing, or copying of this email is strictly prohibited. Please consider the environment before printing this email.
