Java SE (Java Platform, Standard Edition)

I've created a GPO as follows to disable Java Updates by creating the supposedly required registry entry. But still on PCs users continue to have the update prompt - with UAC on and non local admin this is embarrassing. Why is this so fucking hard? Why can't Oracle just create a ADMX to support their product? Is it because non of the ways that should disable updates actually work??

Simple question Oracle - how do I disable updates on all our organisations PCs?

EnableJavaUpdate (Order: 1)hide
Generalhide
Action Update
PropertiesHive HKEY_LOCAL_MACHINE
Key path SOFTWARE\JavaSoft\Java Update\Policy
Value name EnableJavaUpdate
Value type REG_DWORD
Value data 0x0 (0)

Commonhide
OptionsStop processing items on this extension if an error occurs on this item No
Remove this item when it is no longer applied No
Apply once and do not reapply No

EnableJavaUpdate (Order: 2)hide
Generalhide
Action Update
PropertiesHive HKEY_LOCAL_MACHINE
Key path SOFTWARE\Wow6432Node\JavaSoft\Java Update\Policy
Value name EnableJavaUpdate
Value type REG_DWORD
Value data 0x0 (0)

Commonhide
OptionsStop processing items on this extension if an error occurs on this item No
Remove this item when it is no longer applied No
Apply once and do not reapply No
Item-level targeting: Environment VariableAttribute Value
bool AND
not 0
variableName %Processor_Architecture%
value AMD64