Stop Java Expiration SCCM 2012

Beginning with Java 7 Update 40 the option to disable the Java expiration date is available. When Java 7 Update 10 came out, Oracle built in a hard-coded expiration date that caused allot of system administrators headaches. For our company we had about 100 users in our sales department  that didn’t have local administrator rights. These users were often on the road and out of the office so we couldn’t manage their Java installations on our Windows domain. To make matters worse we have a Java based in-house app that is critical to their job performance. Unfortunately when the Java expiration date came the users tried to update their Java version but didn’t have the sufficient rights to do so.

They ended up with the message below:

Java expiration date

Application Blocked by Security Settings: Your security settings have blocked an application from running with an out-of-date or expired version of Java.”

That didn’t go over well, and since we had not checked the Java release notes the I.T. staff was really caught off-guard. Starting with Java 7 Update 40 the following deployment property setting can be used in the deployment.properties file:

deployment.expiration.check.enabled

Setting the deployment.expiration.check.enabled=false in the deployment.properties file will let you run an out-of-date or expired version of Java. The warning below will now replace the “Application Blocked by Security Settings” message above.

Java Security Warning Expiration

If you really want to run the Java applet select the “I accept the risk and want to run this app.” check-box and Click RUN. Of course doing this on your local PC is an easy task if you have local administrator rights. You can create the directory C:\windows\sun\java\deployment\ and place the deployment.properties file there or edit the existing deployment.properties at C:\users\username\AppData\LocalLow\Sun\Java\  on a Windows 7 PC and add the deployment.expiration.check.enabled=false property to the deployment.properties file located there.

Pushing out these changes to Windows Domain Computers is also a fairly simple task with Configuration Manager 2012. Please Click-Here to CONTINUE READING.

Sponsors