Thanks for your advice, but that's not a suitable solution for us because we have users they need the Java Control Panel to change settings (e.g. clear Cache, Network settings, ...) which are not locked through Deployment.properties
By the way... If you disable the Java Control Panel (*.CPL) through Policy/Registry you do not disable the "Open Control Panel" item from the contextmenu of the Java Task Tray Icon.
Of course you could also disable the Icon, but this is usefull for troubleshooting (Open Java Console, see which Java Version is used)
Isn't there a simple way to lock (or hide) only the Java Tab inside the Java Control Panel?? (e.g. through Deployment.properties ??)