To disable Java in IE, we're thinking about deploying some registry settings in Group Policy Preferences that 'replace' current settings. Once the settings are applied, it looks that there's no easy way of going back short of re-applying a 'default' list
of settings. I'm interested in how everyone else approaches something like this.
Orange County District Attorney