See the information I posted in here: http://community.landesk.com/support/thread/20399?tstart=0
It shows you how to set the Java patch to Auto-Close browsers.
We patch 10K systems each month in under 5 days (80% of that in 2 days) using LANDesk. We have few issues, Also, you can go under the "Security Threats" and look for 'patches' that will disable the auto-update feature on many of the applications that try to do so. You can add them to your baseline group and have them repair as needed. Also, some patches, such as the Java one has a setting to disable the auto-update built into it, see the image shown in the link above, it is shown there.
Auto closing the browser would lead to more trouble. I can't do that. I responded to you post in the other thread with more.
fina result on this is that I have to use GPO to install Java because LANdesk cannot do it without forcing the IE windows to close. and I can't do that. I'd rather not have an angry mob of users chasing me with pitchforks and torches....
just a quick thought (sorry for posting after correct answer), but have you tried using a delivery method to install at next login?
Theoretically, you would be able to secure the install when no browser is running.
Under the Custom Properties of the Java update, select "yes" for the Force Mode. Then setup a scan and repair setting to either "Wait to repair until the machine is locked or screen saver is running", or "wait to repair until user is logged off."