We block executable files so they don't run from %appdata% and %localappdata% as was advised to protect from Cryptolocker virus. Now it happens that Java updates don't run claiming the file isn't allowed because of a GPO. We'd like to keep blocking EXEs except Java. Anybody knows which files Java autoupdate is using so we could exclusively allow those? Installing Java directly downloading it from the site works fine, it's the darn autoupdate that gives us trouble. Thanks. Alex.
↧