My Standard Users are having problems loading Java from IE9 when they visit sites which have Java content. As soon as Java tries to start, IE crashes. If I disable UAC by changing the policy "User Account Control: Run all administrators in Admin Approval Mode" to "Disabled" then Java works normally in IE9 for Standard Users, however UAC is now turned off for the entire system. I would like to have UAC on. The computers in question all share the same Group Policies. Within those policies we have enabled several things, some of which are Folder Redireciton and Roaming Profiles (on a per-machine level rather than a per-user level). I haven't figured out if these are contributing factors or not yet. In trying to troubleshoot this, I noticed that Java expects the file "C:\Users\username\AppData\LocalLow\Sun\Java\Deployment\deployment.properties" to exist, and if it is not there, it gets created. However, when "User Account Control: Run all administrators in Admin Approval Mode" is set to "Enabled" this path/file is not able to be created when IE starts Java, which seems to be what is crashing Java and taking IE with it. If I do something to create this file before launching IE, like launching the Java Control Pannel which creates this file on launch, I can then run IE9 and use Java. However, because this is in the LocalLow folder, it is not synced at logout, and the next time a user logs in the error returns when they attempt to visit websites using Java. Has anybody encounterd this before and have found a fix? I would really rather not disable UAC on my student computer lab PCs if I can avoid it.

I did not encounter the issue before. However, I do knwo Java had multiple updates to (better) support UAC. You can check teh currently installed version against the latest using http://java.com/en/download/installed.jsp?detect=jre&try=1 It might be worth a try to fully update a machine (Windows updates), to uninstall the currently installed version of java and install the latest version for your platform from http://java.com/en/download/manual.jsp Also, please be informed that in fact Oracle is to support issue in installing or using Java on your computer, not Microsoft.MCP/MCSA/MCTS/MCITP

I did not encounter the issue before. However, I do knwo Java had multiple updates to (better) support UAC. You can check teh currently installed version against the latest using http://java.com/en/download/installed.jsp?detect=jre&try=1 It might be worth a try to fully update a machine (Windows updates), to uninstall the currently installed version of java and install the latest version for your platform from http://java.com/en/download/manual.jsp Also, please be informed that in fact Oracle is to support issue in installing or using Java on your computer, not Microsoft.MCP/MCSA/MCTS/MCITP

I have considdered that the Java version could be the problem, but I have checked and I am encountering this on several different builds of Windows 7 using different versions of Java 6 and even the latest Java 7 version. Upgrading/downgrading has no effect on the issue whatsoever. I believe I have this completely narrowed down to Group Policy because if I change "User Account Control: Run all administrators in Admin Approval Mode" to "Disabled" Java funtions normally, OR if I move the computer to an OU which has no policy applied at all, I have no trouble running Java. As a test, I created a new blank Policy and ONLY replicated my UAC settings from the suspected problem Policy to the new blank one, and in that scenario Java functioned normally. I am left thinking that having the setting "User Account Control: Run all administrators in Admin Approval Mode" set to "Enabled" must be interacting with something else in the policy because I can use Java without any issues when it is enabled without any other policy in place. My new course of action is to start building up a new policy based on the problem one by configuring a small number of settings at a time and then testing Java functionality within IE.

Hi, I just tested this on my local x64 system using local policies. My Java 32 bit version 6 update 29 functions both functions with the policy set to enabled or disabled. both for an admin as for a standard user. I tested by loading the version detection page linked above. Of course this Java aplet does not require elevation. Which brings me to another point: what java application are you testing? Might this be a local application that depends on data in the userprofile? Does the application requires elevation? Can you verify that javaw.exe launches when opening the java containing website? please do not rely on what you have seen before, but take 1 sytem with the issue, and _fully_ update it and see if the issue persists. Also be informed "admin approval mode" is in fact the default configuration for admins. If admin approval mode would render Java useless for standard users, the impact might be for millions of computers.... not something that Microsft would not notice! Another angle of attack on this issue might be not to focus on UAC and Java, but on IE. You state IE crashes because of Java containing websites? Did you do troubleshooting on the IE side? Cleaning temporary internet files, setting IE to defult settings,... http://support.microsoft.com/kb/936213 Consider testing with a simple java site like the version detection page linked above. If that works, the issue might even be in the Java app itself! MCP/MCSA/MCTS/MCITP

Yes, as I mentioned above, if I create a NEW policy and only flip that UAC setting back and forth, it has no effect on the operation of Java; Java continues to work if the computer's only applied policy is the UAC settings. There must be something else in my computer policy that is causing this. Java will not run in the browser period. The page I use to test on every machine, with every version of Java, with every Windows Update applied is: http://www.java.com/en/download/installed.jsp

Java will not run in the browser period. http://www.java.com/en/download/installed.jsp Please use sysinternals process explorer to verify whether javaw.exe runs/is launched when browsing to a java-enabled website. (process explorer allows to even see the process and it's properties if is directly closed) Consider to contact Micorosft Support directly to open a support case and get help in troubleshooting your specific set of policies: http://support.microsoft.com/gp/cu_sc_selector_telephone/en-au Also pleae consider Oracle for Java specific support: they might already knwo the specific issue or have Java specific troubleshooting tips. MCP/MCSA/MCTS/MCITP

Yes, javaw.exe starts briefly and the process is then terminated. The issue is that the file C:\Users\username\AppData\LocalLow\Sun\Java\Deployment\deployment.properties is not present, and for some reason, Java, when started through Internet Explorer, is not able to create this file. If I do something to create that file before attempting to start Java within IE, Java works. One method of creating that file is to simply open the Java Control Panel, which creates that file. After that, I am able to start Java within IE without any problems regardless of what my UAC policy is set at.

javaw will terminate indeed if it cannot read/create a config file. In fact i think you should file the behaviour you encounter as a bug for Java... if the process launches, this is not a a real UAC issue: UAC intercepts calls before the program is launched. i think is more likely Internet explorer "protected mode" is culprit. please xonsider turning that off for toubleshooting purposes http://windows.microsoft.com/en-US/windows-vista/What-does-Internet-Explorer-protected-mode-do http://msdn.microsoft.com/en-us/library/bb250462(v=vs.85).aspx#wpm_sftup MCP/MCSA/MCTS/MCITP

Thanks for the tip. If I leave all my full compliment of existing Policies in place and DISABLE protected mode, then my Java issue is corrected and Java is able to successfully create that file. Once you tipped me in that direction, I went back and again created an empty group policy and ONLY applied the UAC configuraiton settings as they exist in my production policy, and move my test PC into that OU. In that scenario, it doesn't matter whether Protected Mode is ON or OFF, Java runs normally. So once again, I am lead back to this being something configured in my computer policy that is preventing Java from creating that file. Disabling UAC corrects the behaviour when all my other settings are applied, however it is not the root cause of the issue. Back to testing my configurations items within my policy one-by-one.

Unfortunately the forums are not the best way for assistance in troubleshooting policy issues... as indicated before, I suggest contacting Microsoft support and open a ticket. An alternative would be to deploy the java config file to the user profile as part of the Java deployment.MCP/MCSA/MCTS/MCITP

Unfortunately the forums are not the best way for assistance in troubleshooting policy issues... as indicated before, I suggest contacting Microsoft support and open a ticket. An alternative would be to deploy the java config file to the user profile as part of the Java deployment.MCP/MCSA/MCTS/MCITP

I think I have this behaviour down to only occurring when I have Application Data redirected to a network share (via Group Policy). If I remove the Roaming AppData redireciton policy, then Java works normally. Also, if I leave AppData redirection on, but either turn off UAC OR Disable IE Protected Mode Java will also work.

Yes, if I turn off Application Data redirection (which was redirected to a network share) and let it live in the user profile instead, then Java works correctly. If Applicatoin Data is redirected to the network, then the only way to get Java to work is to either Disable UAC OR Disable IE Protected Mode for the zone in which I am trying to start Java from IE (in this case, the Internet Zone). The starange thing is that Java is trying to create files at c:\users\username\AppData\LocalLow, not at C:\users\useranem\AppData\roaming, so I am not sure why folder re-direction is having any impact on this at all unless it is trying to do something with IE which has it's data located in the Roaming folder.

- Put the site in the Intranet or Trusted Sites zones. That will disable Protected Mode for the site. Turning off UAC also disables Protected Mode, but turns it off for all zones and has other drawbacks too. - If the above does not resolve the issue, then we will need more information. - We will need to take a procmon trace. - Is it a problem with all Java apps or just a specific set of apps? - IE9 works only with JRE 1.6 Update 24 +. http://support.microsoft.com/kb/2506617 http://blogs.technet.com/b/fdcc/archive/2011/10/18/alert-java-s-forward-compatibility-promise-has-been-revised.aspx http://blogs.technet.com/b/security/archive/2011/11/28/millions-of-java-exploit-attempts-the-importance-of-keeping-all-software-up-to-date.aspxKetan Thakkar | Microsoft Online Community Support

- Put the site in the Intranet or Trusted Sites zones. That will disable Protected Mode for the site. Turning off UAC also disables Protected Mode, but turns it off for all zones and has other drawbacks too. - If the above does not resolve the issue, then we will need more information. - We will need to take a procmon trace. - Is it a problem with all Java apps or just a specific set of apps? - IE9 works only with JRE 1.6 Update 24 +. http://support.microsoft.com/kb/2506617 http://blogs.technet.com/b/fdcc/archive/2011/10/18/alert-java-s-forward-compatibility-promise-has-been-revised.aspx http://blogs.technet.com/b/security/archive/2011/11/28/millions-of-java-exploit-attempts-the-importance-of-keeping-all-software-up-to-date.aspxKetan Thakkar | Microsoft Online Community Support

Yes, I am aware that putting the site in the Trusted Sites Zone will resolve the issue, however the problem occurs every time IE starts Java from any site. I can't exactly put the whole internet in the Trusted Sites Zone, and if I could, then I should just turn of Protected Mode. As I stated, this only happens when I have AppData redirected to a network share. If I turn off AppData redirection in the policy (Leaving UAC and Protected Mode enabled) I have no problem with IE starting Java. For the record, I am using the latest version of Java, even Java 7 in some cases.

I can confirm UAC is giving me grief with the latest Java 6 Update 30. I've searched the Java FAQ which is useless. There's an article on there about UAC and it's simply an explanation of what it does and how to turn it off and on. I can't believe there's no evidence of problems running Java with Vista and UAC . I've actually seen this one time before, and I was able to get around it by temporarily disabling all antivirus (Norton, Windows Defender, Prevx (now Webroot WSA), and UAC. I can get Java to work in IE9 but only with UAC turned off. I can get it to work intermittently with UAC on if I start IE "as administrator". Usually this amounts to the applet not starting the first time but working if I try it again. I am still seeking a simple installation procedure which will get it working and keep it working when I re-enable UAC. I have of course followed all the simple yet ineffective troubleshooting steps on the Java Installation page. Everything is as it should be. There is no explanation why it's not working in IE9, except for UAC. If there's an answer I'm all ears.DB Vista 32bit, IE9 Norton 360, Webroot WSA, Windows Defender, Secunia PSI

How did you deploy it, to users or computers? Do you use GPOs to deploy it? http://www.appdeploy.com/packages/detail.asp?id=38 msiexec /i jre1.6.0_16.msi /passive /norestart /qb ADDLOCAL=ALL IEXPLORER=1 MOZILLA=1 REBOOT=Suppress If the command above is not giving desired results then try adding ALLUSERS=2 property msiexec /i jre1.6.0_16.msi /passive /norestart /qb ALLUSERS=2 ADDLOCAL=ALL IEXPLORER=1 MOZILLA=1 REBOOT=Suppress You can try creating transform file for the deployment that can pass the information from above to the msiexec