For the java installer for the kernel project, it should launch the jbroker.exe located in the jre bin directory when the java install finishes. jbroker.exe should only be started on windows vista platform only.
This will prevent the security pop up when launching jbroker.exe from java/javawebstart/java-plugin, since the installer will be running in high integrity level (IL) already, and jbroker request to run in high IL also.
I'm closing this as a duplicate of the kernel work. This problem was discovered in pit, and never made it back to the master ws. This will simplify the need for approval.