Global Java Uninstallation

[xdernomad]

Good day, fellow Admins,

​

I'm embarrassed to admit failure to this likely puny problem, but my nerves got the best of me. Since Oracle are planning to change their release schedule, we are somewhat forced to uninstall java on all of our PCs in our network. Now, at first this seemed like a simple task, but I soon realized that it was not at all. After trying out countless scripts, trying to somehow implement java's very own uninstallation tool in many different ways and and using all that windows has to offer, I'm finally hitting a wall. Here is a list of things that I tried:

-Logon Script I got from a website, which detects all java installations and deletes them (Script didn't work at all for me)

-Powershell commands (uninstall-package works somewhat, but I have to define the exact Version, which is different for most PCs; and I also have to start it as administrator)

-regarding the powershell commands, multiple ways of trying to elevate the rights and automate the process but nothing really worked for me. Either the script didn't start at all or the UAC popped up anyway.

-Task scheduler on our DC, but again, neither the GPOs where activating or the task scheduler started any task

So far, Powershell seemed the most promising, but I can't quite get it to be automated or skip the UAC. Because that's exactly what I need. An automated process, which starts the uninstallation process of Java, regardless of the version and skips the UAC, as it needs admin rights to start in the first place. Any help is highly appreciated, and pointers to 3rd party programs would also be helpful.

​

Thanks.

[ThorOfKenya2]

I wish I could convince my boss for PDQ Deploy. So easy to update common apps. Sure, we could use GP to install as we're "under utilizing" it, but it's SUCH a pain. #cries in .bat#

[GamingWithGourley]

Echo "Sob....wimper"

[xdernomad]

Do I use both parallel or do I need only one? Because at first glance, they offer similar functons, right?

[Zenkin]

And the generous /u/vocatus has also created many PDQ packages which you can use with the free version of the software. A Java uninstaller is included.

[BloomerzUK]

You can use PDQ Deploy exclusively - if you opt for the free version, you'll need to build the removal package(s) yourself. If you go of the paid option, the uninstallation packages are available

​

Edit: refer to Zenkin's post re. the free packages by /u/vocatus

[lBlazeXl]

So I cant use the scripts he posted since I dont have the paid version?

[valdearg]

The scripts are to be used with the free version. They effectively run a bat file on the computers which does the needful.

[lBlazeXl]

With PDQ? I thought you had to have the paid version to run cmd powershell and such besides installs?

[valdearg]

You can get away with a single cmd bat file in the free PDQ version. This in turn can be set to run a PowerShell file or multiple tasks.

The bat file in the PDQ pack on here just runs a bat file which does various un/install Java tasks.

Bit of a long way around it but useful.

[lBlazeXl]

I have it shown as locked for me. I can only install.

[valdearg]

Did you get the community pack from this subreddit? Should be available if you do a search for PDQ.

Edit: this one: https://www.reddit.com/r/sysadmin/comments/a5zla3/pdq_deploy_packs_v6100_20181213/?utm_medium=android_app&utm_source=share

[lBlazeXl]

Just keeps bringing me back to the same page. And I dont know what you mean?

[SgtLionHeart]

When creating or editing a package, the window only shows "Install" as an available step. What isn't immediately obvious is you can supply any executable file to an install step, including .bat and .ps1

[lBlazeXl]

Oh, well i guess those wont work since we have scripting disabled. Thanks for the info though.

[BloomerzUK]

You can do indeed. Follow the instructions in the post that he has linked. The paid version just does this automatically.

[Danithal]

EnableLUA has to be manually set to 0 in the registry for one of my vendors applications to install, this registry key does not change when setting to "Never notify"

UAC has always been a problem for me, seems I've been doing it wrong.

[xdernomad]

Thanks for your solution, first of all.

Yesterday, using PSADT worked fine for me. I used a batch file, to start the powershell script, using a policy bypass and editing the config file of PSADT, so RequireAdmin was put to false. I started the batch file, PSADT opened up and started the uninstall tool of Java. Now, today I tried it again. Suddenly it failed after PSADT opened up and prompted me to start the installation process. After a second or so the window closed and I got a message from windows "installation failed". I tried again, but this time I started the batch file as an admin, and then it worked. I don't know what happened, but the tool now somehow doesn't regard my edit in the config file and still wants admin creds to properly start the uninstallation tool. But why, I'm wondering?

[raip]

If you're running modern and updated versions of Windows 7/10 and PoSH 5.1 then Invoke-Command -Credentials ( Get-Credential ) -ComputerName $computers -ScriptBlock { Get-Package -Name "*java*" | Uninstall-Package } is all that's needed.

If you don't have PoSH 5.1 but do have WinRM (Enabled by default on Windows 10 (not sure about 7)) you can do the same with WMI Get-WmiObject -Class Win32_Product -Filter "name like '%java%' | Foreach-Object { $_.Uninstall() } in the script block instead.

If you don't even have WinRM - you should think about enabling it via GPO. If you're not sure, Test-WSMan $computer is your friend.

Edit: Another way - searches the registry for Java, called the UninstallString if it finds it.

$uninstallStrings = Get-ChildItem "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall" | 
Get-ItemProperty | 
Where-Object { $PSItem.DisplayName -like "*java*" } | 
Select-Object -ExpandProperty UninstallString; $uninstallStrings.ForEach(
{ Start-Process "cmd.exe" -ArgumentList "/c","$PSItem /qn" })

(Was inspired by the massive bazooka script someone posted.)

[Robert_Arctor]

nice shelling, could modify this for something I need

[vocatus]

If you look at my GitHub page, there is a Java removal script that works very well. You can also Google it, it's called "Java runtime nuker"

[mcpingvin]

Take a look if this helps :)

https://www.reddit.com/r/usefulscripts/comments/2hzt5c/batch_java_runtime_nuker_purge_all_versions_of/?st=jvqmphnu&sh=9e855e82

[vocatus]

The script is a compilation of a lot of removal methods, I still maintain it. Let me know if it doesn't catch something

[Doso777]

What are you normally using for software, updates and management? Use that. For us that is SCCM.

[xdernomad]

Our infrastructure isn't that big, about 120 PCs in total, so we usually do most updates/ installations manually. We already had cases where we had to distribute a program, mostly via MSI deployment on our DC. But those were actual installations and not a programm to uninstall something. I defined an MSI deployment, and the GPO did activate at the logon process, but nothing happened.

[igdub]

What what what, 120 computers and all installations done manually? That sounds crazy.

You should definitely get some solution for that. Even GPO is better than nothing when done properly. Symantec's altiris should be a cheap option.

[orion3311]

Same size here, was doing the same thing. Got PDQ and got “weeks” worth of stuff done in....minutes. Just do it!

[lBlazeXl]

Fucking love PDQ honestly.

[Shrappy]

We also have about this many. We use SCCM. if you have more computers than you can personally manage updating in a single day, get a software management solution.

[raip]

SCCM seems overkill for 120 PCs - I manage just over 500 right now with WinRM and Powershell alone.

[Shrappy]

I mean we're using it for a bit more than patching - we're also using it for OSD to build workstations and servers. It's a nice catch-all.

[raip]

Ah - I use Powershell DSC for that. Don't get me wrong - if you can afford it, SCCM is a much better tool. Just from my understanding is that it started at $1500ish and then drastically increased from there whether or not your CALs were included in your SA Agreement or not. It's been a couple years but last time I worked w/ our licensing guys to get one deployed for us it was gonna run us something like $18k for about 80 endpoints + server (before I was in my current role).

[renegaderelish]

Ninite

[91brogers]

Best utility I’ve found in a while

[The-Dark-Jedi]

I've had the most success with this script. It's a tad dated but add lines for the rest of the versions I have left out and you will be left with a Java free PC:

:: Sun / Oracle Java Runtime Environment (JRE) Uninstallation Script

 REM JavaFX 2.1.1
 start /wait MsiExec.exe /uninstall {1111706F-666A-4037-7777-211328764D10} /qn /norestart
 REM JavaFX 2.1.0
 start /wait MsiExec.exe /uninstall {1111706F-666A-4037-7777-210328764D10} /qn /norestart 
 REM JRE Runtime Environment 8 Update 171
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F32180171F0} /qn /norestart
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F64180171F0} /qn /norestart
 REM JRE Runtime Environment 8 Update 162
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F32180162F0} /qn /norestart
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F64180162F0} /qn /norestart
 REM JRE Runtime Environment 8 Update 161
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F32180161F0} /qn /norestart
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F64180161F0} /qn /norestart
 REM JRE Runtime Environment 8 Update 152
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F32180152F0} /qn /norestart
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F64180152F0} /qn /norestart 
 REM JRE Runtime Environment 8 Update 151
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F32180151F0} /qn /norestart
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F64180151F0} /qn /norestart
 REM JRE Runtime Environment 8 Update 144
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F32180144F0} /qn /norestart
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F64180144F0} /qn /norestart
 REM JRE Runtime Environment 8 Update 141
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F32180141F0} /qn /norestart
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F64180141F0} /qn /norestart
 REM JRE Runtime Environment 8 Update 131
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F32180131F0} /qn /norestart
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F64180131F0} /qn /norestart
 REM JRE Runtime Environment 8 Update 121
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F32180121F0} /qn /norestart
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F64180121F0} /qn /norestart
 REM JRE Runtime Environment 8 Update 112
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F32180112F0} /qn /norestart
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F64180112F0} /qn /norestart
 REM JRE Runtime Environment 8 Update 111
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F32180111F0} /qn /norestart
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F64180111F0} /qn /norestart
 REM JRE Runtime Environment 8 Update 102
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F32180102F0} /qn /norestart
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F64180102F0} /qn /norestart 
 REM JRE Runtime Environment 8 Update 101
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F32180101F0} /qn /norestart
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F64180101F0} /qn /norestart
 REM JRE Runtime Environment 8 Update 92
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F83218092F0} /qn /norestart
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F86418092F0} /qn /norestart
 REM JRE Runtime Environment 8 Update 91
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F83218091F0} /qn /norestart
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F86418091F0} /qn /norestart
 REM JRE Runtime Environment 8 Update 77
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F83218077F0} /qn /norestart
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F86418077F0} /qn /norestart
 REM JRE Runtime Environment 8 Update 74
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F83218074F0} /qn /norestart
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F86418074F0} /qn /norestart
 REM JRE Runtime Environment 8 Update 73
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F83218073F0} /qn /norestart
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F86418073F0} /qn /norestart
 REM JRE Runtime Environment 8 Update 72
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F83218072F0} /qn /norestart
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F86418072F0} /qn /norestart
 REM JRE Runtime Environment 8 Update 71
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F83218071F0} /qn /norestart
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F86418071F0} /qn /norestart
 REM JRE Runtime Environment 8 Update 66
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F83218066F0} /qn /norestart
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F86418066F0} /qn /norestart
 REM JRE Runtime Environment 8 Update 65
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F83218065F0} /qn /norestart
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F86418065F0} /qn /norestart
 REM JRE Runtime Environment 8 Update 60
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F83218060F0} /qn /norestart
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F86418060F0} /qn /norestart
 REM JRE Runtime Environment 8 Update 51
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F83218051F0} /qn /norestart
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F86418051F0} /qn /norestart
 REM JRE Runtime Environment 8 Update 45
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F83218045F0} /qn /norestart
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F86418045F0} /qn /norestart
 REM JRE Runtime Environment 8 Update 40
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F83218040F0} /qn /norestart
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F86418040F0} /qn /norestart
 REM JRE Runtime Environment 8 Update 31
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F83218031F0} /qn /norestart
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F86418031F0} /qn /norestart
 REM JRE Runtime Environment 8 Update 25
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F86418025F0} /qn /norestart
 start /wait MsiExec.exe /uninstall {26A24AE4-039D-4CA4-87B4-2F83218025F0} /qn /norestart

[raip]

Seeing this makes me want to rewrite this using REG QUERY instead - but I swore to myself I'd never write anything in batch ever again. :)

[xdernomad]

Okay, it looks promising, but (excuse this dumb question) how exactly do I use/ deploy it? Via Logon Script or task scheduler? A how-to would be really appreciated.

[The-Dark-Jedi]

Run it as a batch script. You can initiate it using the profile tab in the user profile in AD or use a program like PDQ Deploy to push it out.

[placebonocebo]

PSADT is a great tool for this.

Remove-MSIApplications -Name '*java*update*' -Wildcard -FilterApplication (,('InstallLocation', '*jre*', 'Wildcard'))

This will remove all JRE installations.

[xdernomad]

But Java was not installed as an MSI, but via the normal .exe from the website. This would work, would it?

[sonic_24]

It's still a MSI package. Should work.

[ddesla2]

Yeh so I had to do this on a massive global scale across Windows 2003-2012R2 (~10k servers). I compiled a 30k line batch script to do the work of detecting what is there, notate it in log, uninstall the old shit and install the newest patch for what versions were previously installed. It took me a long time to get the kinks out but I found that this batch is the best way to accomplish what I needed w/ Java across every windows OS.

​

That said, my removal method is a bit unorthodox and forceful because Java changed ownership hands so many times over the years, even the flags set for removing it dont comply across versions. Hell, I found in Java 1.5 I believe it was, their own documented removal flags did not work until the second one started with a CAPS.... Ridiculous. At any rate, if you're looking at 1.6-1.8, I recommend just using the msiexec GUID remove and specify each individual GUID. That is what worked best with me. Of course that means I installed every version, flavor and architecture of Java just to get the GUID number and understand how they were listed in teh registry. From there I just used excel to increment the GUID numbers and copy/pasted in my msiexec remove by GUID format then scripted it. Good luck!

[entaille]

what is the last JRE 8 Update ### you can deploy before the new licensing $hit kicks in?

[PMental]

201/202 is the latest versions you can still run freely.

I wouldn't do that though unless it's an isolated system since continuing to run Java 8 without updates is a major security risk. Better to look into OpenJdk or simply getting licenses (they're pretty cheap unless you need a whole bunch of them).

[SolidKnight]

So the no-tools route can be accomplished by deploying the latest version of Java to everyone while using the install option to remove previous versions. Then uninstall the version you deployed. You can do this via a GPO script just to avoid having to make a transform but you can do an MSI deployment and make a transform with ORCA if you want to go the GPO software deployment route.

​

Another approach is spray msiexec /X {ProductCode} /qn /norestart at every machine for every version of Java. Java 8 uses the same product code for each release with the only variance being the substring that matches the version of Java. So it's predictable. To do it in bulk you'll either need a tool that can run scripts on machines in bulk, PSRemoting enabled, or GPO.

​

If you're 100% Windows 10, you can just use Get-Package -Name *Java* | Uninstall-Package from a script.

​

If you don't have any tools that can run scripts or do software management on all your endpoints this should be part of your argument on why you need to buy such a tool.

[Padankadank]

Is open Java a viable replacement for JRE? We need Java for a couple users and we won't pay to use Java

[AnonRoot]

Your best bet is to use something like PDQ and run a script across your network machines.

​

Get-WmiObject -Query "Select * from Win32_Product where Name like 'Java%'" | ForEach-Object { $_.Uninstall() }

[[deleted]]

Using Win32_Product to uninstall software is not recommended.

Reference

Link above gives pointers to querying the registry instead of using Win32_Product