1. The difference between 32 bit and 64 bit Java correlates to which version your browser supports. Lots of plugins don't have a 64 bit version so we've basically chosen to ignore IE 64 and only push 32 bit plugins to all machines regardless of whether the OS is 32 or 64 bit. You could push both 32 and 64 to 64 bit machines and only 32 to 32 bit machines, but I think the opportunity for problems outweighs any potential benefits. How much RAM does a browser need to access anyway?
2. You can leave the existing policy in place, but remove the old package and add the new one. (see below) 3. Check "Uninstall this application...", this coupled with the above will remove old versions as you push new ones out. I'm not sure how clean uninstall is when a Java update does it, but removing the MSI is about as clean as you can get. From: Jim Dandy [mailto:jda...@asmail.ucdavis.edu] Sent: Friday, January 28, 2011 10:45 AM To: NT System Admin Issues Subject: GP software deployment best practices I'm going to start pushing Java via Group Policy and have a few questions with regard to best practices. 1) Some of my machines are 32-bit and some are 64. My thought is to create a "Java policy" that pushes both the 32 and 64-bit versions. 64-bit machines would get both and 32-bit machine would only get the 32. Is it OK to have a GP that attempts to push a 64-bit software to 32-bit machines or is that going to cause problems? It seems to work OK on my test machines but perhaps I'm missing something? 2) When a new version of Java comes out should I remove the old policy and create a new policy to push the new version or should I apply the new version as an update to the older version (using the update tab on the GP)? 3) Since the new version will uninstall the old version should I select "Uninstall this application when it falls out of the scope of management" or should I just let the new Java installation remove the older version? Thanks for your help. Curt Finley ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin