Prevent Java pop-ups in Citrix

Summary:
To stop the built in date expiration (which is typically the more difficult to stop)
Put the following line in Deployment.properties

• deployment.expiration.check.enabled=false
• deployment.expiration.check.enabled.locked

Set an environment variable

• setx deployment.expiration.check.enabled false /m

Expanded Solution (Copied and pasted from my notes in Word, so formatting is a little borked)

Prevent Java pop-ups in Citrix.

NOTE: The below steps were developed for Java 7 Update 51. Issues were found with limiting the “Allow this application to run” prompt when using Java 7 Update 75
1.       Global Java settings can be configured on a system by creating two files under c:\windows\sun\java

a.       Create the following files in notepad, and remove the .txt extension when you are done.

b.      Create Deployment.config and add the italicized lines

                                                               i.      This file specifies the config file (below), and can be used to enforce the settings as mandatory

                                                             ii.      deployment.system.config=file\:C\:/Windows/Sun/Java/Deployment/deployment.properties

                                                            iii.      deployment.system.config.mandatory=true

c.       Create Deployment.properties

                                                               i.      This file is where you specify any system-wide settings you want in place for Java. Google the filename for examples (note *.locked lines prevent user modification of the setting)

                                                             ii.      deployment.javaws.autodownload=never
                                                            iii.      deployment.javaws.autodownload.locked
                                                           iv.      deployment.expiration.check.enabled=false
                                                             v.      deployment.expiration.check.enabled.locked

1.       Stop expiration of version check. Even with no internet connection, expiration can be flagged by a preconfigured date.

2.       Note, java ignores this file for this specific setting the first time it is run after this entry is entered. To prevent this use one of the following 3 methods

a.       Environment variable (Recommended)

                                                                                                                                       i.      Win7/2008: setx deployment.expiration.check.enabled false /m

b.      Java WebStart command line to set property per user

                                                                                                                                       i.      javaws -userConfig deployment.expiration.check.enabled false

c.       Edit Reg for user

                                                                                                                                       i.      HKCU\Software\AppDataLow\Software\JavaSoft\DeploymentProperties

1.       REG_SZ: deployment.expiration.check.enabled "false"

        EDIT: This previously (and mistakenly) said DWORD instead of REG_SZ.

                                                           vi.      deployment.expiration.check.enabled.locked
                                                          vii.      deployment.expiration.decision=never
                                                        viii.      deployment.expiration.decision.locked
                                                           ix.      deployment.expiration.decision.suppression=true
                                                             x.      deployment.expiration.decision.suppression.locked
2.       If receive cream bar at top of IE asking to run Java, add site to trusted sites
3.       Prevent “Do you want to run this application” pop up warning

a.       Go into the Java app, and when prompted by this, check “Do not show this again...”

b.      Go to Control Panel, and launch the Java control panel.

c.       Go to Security tab > Click Manage Certificates

d.      Export the cert for this application form the java control panel

e.      Launch the Windows Certificates Manager (Launch MMC, add Certificates snap-in) for the computer cert store.

f.        Select Trusted Publishers and import the cert.

g.       Go back to the Java control panel and remove the cert from Security tab > Manage Certificates…

4.       Prevent Internet Explorer from prompting to run Java

a.       Add *.website.com to the trusted sites in Internet Explorer