Friday, April 26, 2013

Disable SSV.DLL and JP2SSV.DLL

Overview

ssv.dll
jp2ssv.dll

These two files are installed with the installation of a full Java client.

When Internet Explorer is launched, these two add-ins cause the registry to be repeatedly queried for Java version information. If this happens on a Terminal Server (Remote Desktop Server, Citrix XenApp server) where there are multiple users logged on simultaneously, these queries will severely impact server performance as more users log on to the servers and launch IE.



Resolution
To resolve (and prevent) this issue, configure "Everyone: No access" NTFS permissions on these files.

This will benefit servers and PC desktops.



Applies to
This applies to the Java client installation on any Windows desktop or server OS.

Windows Server 2003
Windows Server 2008
Windows XP
Windows Vista
Windows 7


Script to disable
DisableJavaSsvDll.CMD

@echo off
CLS
Echo.
Echo There are 2 versions of SSV.DLL:
Echo    One is named SSV.DLL
Echo    Another is named JP2SSV.DLL
Echo.
Echo This script will find and disable all instances of *SSV.DLL on C:
Echo This is accomplished by giving "EVERYONE" "DENY FC" access to these files
Echo.
Pause

Echo.
Echo Checking C:
for /f "delims=" %%x in ('dir /s /b C:\ssv.dll') do (
   @echo.
   @echo Modifying "%%x"
   @cacls "%%x" /E /P EVERYONE:N
   )

for /f "delims=" %%x in ('dir /s /b C:\jp2ssv.dll') do (
   @echo.
   @echo Modifying "%%x"
   @cacls "%%x" /E /P EVERYONE:N
   )

Echo.
Echo %Date% %Time%
Echo Script ran to completion
pause