Symantec Management Platform (Notification Server)

Please forgive me if a solution has been posted elsewhere, but I was unable to find it.  Since the release of Java 8, I need to create a filter to show me all of the endpoints that have the Java Auto-Updater (the "Update" tab in the Java control panel) present so that I can uninstall it.  Currently, I use the following SQL in a filter:

select distinct [vif].[_ResourceGuid]
from [Inv_Installed_File_Details] vif
where FileResourceGuid='011c1286-bd8c-4bdf-8b4b-50987f7fecd8'

Up until recently, I thought this was working as expected.  But now I am finding systems that have the updater installed, but do not have my uninstallation policy in the software delivery tab, indicating that they are not being picked up by the filter.  I also see the reverse of this where the system is in my filter, but in fact does not have the updater installed.  The code above currently shows me about 81 systems.  When I try the code below instead, I get 355 results.  However when I connect to several systems in the filter and browse to the Java Updater installation path as shown in the last line of the code, there's nothing there.

select distinct [vif].[_ResourceGuid]
   FROM [RMV_Installed_File_Inventory] vif
   where [File Name] = 'jucheck.exe'
   AND [Path] LIKE 'C:\Program Files%\Common Files\Java%'

 

Is there a better way to do this?  I need to be sure that endpoints within my organization to not pick up Java 8 via the updater until we have a chance to test it with our web applications.  So I need something that is going to be pretty reliable.  I should also mention that I know very little about SQL.  Everything above I have pieced together from random forum postings and Google searches.  So I may need explanations of whatever somebody provides.

Any help would be greatly appreciated.

I don't have a system in front of me at the moment but I think you need to look in Inv_Installed_file_Details, I've not used the RMV tables before but would guess it stands for "removed". Use Resource Manager to look at the inventory of a PC you know has it and the Statu tab will show you the table. If you use a Managed Delivery Policy with a detection rule and a Command Line of type Uninstall it doesn't matter of you overtarget, the uninstall will only run if the file is detected. Consider blocking the update using your internet firewall or proxy.