• http://www.djoey.net/2013/06/set-java-security-level-system-wide.html

Java is another application that drives me crazy. Since update 7.21 security level and mixed mode settings are ridiculously strict. To get around this on a Remote Desktop Host (Terminal Server) and fix this for all users that log on:

1. Create the following directory path C:\Windows\sun\java\deployment.
2. Create a file called 'deployment.config' in this directory and open with Notepad.Copy the two lines below.

   C:\Windows\sun\java\deployment\deployment.config

   deployment.system.config = file\:\\C\:\\WINDOWS\\Sun\\Java\\Deployment\\deployment.properties
   deployment.system.config.mandatory = true

3. Create a file called deployment.properties in this directory and open with Notepad. Copy the four line below. (#deployment.security.level.locked optional)

   C:\Windows\sun\java\deployment\deployment.properties

   deployment.version=7.21
   deployment.security.mixcode=HIDE_RUN
   deployment.security.level=MEDIUM
   deployment.browser.path=C\:\\Program Files (x86)\\Internet Explorer\\iexplore.exe
   #deployment.security.level.locked

   (without path and version, security level will be ignored)

4. Delete C:\Users\%Username%\AppData\LocalLow\Sun
5. Delete: HKEY_CURRENT_USER\Software\AppDataLow\Software\JavaSoft\DeploymentProperties
6. Open Java from Control Panel. You will find the security is now set to MEDIUM. If the lock was imposed, the user will not be able to adjust this setting as it will be greyed out.
7. Step 4 and 5 are not really necessary because the system wide deployment.properties overrides any set option on user-level deployment.properties. But if you like to keep profiles tidy and clean you could do it.

Also make sure you update deployment.version if a java update is deployed. To fix this for Deskops or Virtual Desktops you could create a GPO to copy the files.

Sources:

• http://www.darkoperator.com/blog/2013/1/12/pushing-security-configuration-for-java-7-update-10-via-gpo.html
• http://www.syswow64.co.uk/2013/05/java-7-update-21-1721-enterprise.html</blockquote>