My company is researching a complete removal of JRE on our windows platform. I have researched several alternatives for implementation in a large enterprise architecture. Simply, wanted to throw the question out there if anyone has suggestions. Thanks
closed as off topic by Terry Chia, Iszi, Rory Alsop♦ Oct 3 '12 at 15:16
Questions on IT Security Stack Exchange are expected to relate to IT security within the scope defined in the FAQ. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about closed questions here.
I suppose you want to remove the Oracle JRE because of the security issues which have recently been found.
There are other implementations of Java out there, but the efficient and reasonably complete ones all derive from the same base code (OpenJDK, JDK from IBM...) so they tend to share the same security issues.
An important thing to note: security issues with Java are about the sandbox model, i.e. for applets running in the Web browser. It makes little sense to ban Java itself from the desktop machines (if Java itself, not the applet part, is a security issue, then this means that people run potentially hostile applications, and Java does not make it worse -- a simple executable which was written in C has already as much destructive power). You could deactivate the Java browser plugin, which would prevent execution of applets, but not of applications which use Java locally (e.g. an Oracle database).