Java and Adobe recurring cleanup SOP
Overview
Desktop Java/Reader sprawl invites exploit chains—inventory monthly.
Actions
Remove unused JREs; standardize on single supported version for dependent LOB apps only.
Packaging
Deploy via Intune/ConfigMgr with vendor silent switches documented.
Exceptions
Air-gapped lab machines isolated—not exempt sticker on CFO laptop.
Metrics
Count of endpoints with outdated Java—drive to zero except approved list.
Related Articles
EDR deployment checklist for new workstations
## Overview Use this runbook when onboarding a new Windows workstation or re-imaging a device that...
Handling Defender for Business false positives
## Overview False positives waste analyst time and train users to ignore alerts. This article stand...
Application allowlisting with Windows Defender ASR rules
## Overview Attack Surface Reduction (ASR) rules reduce exploit surface by constraining Office macr...