Since Java is NOT "an Integral Part of Windows" (nasty dig at Microsoft's anti-trust defense) the rules are the same as for any other Java installation. I think that would be lib/security in the java runtime directory tree. This is supposing non-applet code. The rules for a signed applet are kept in the signed jar in order to allow them to be transported and to protect them from being tampered with. You can also have localised security policies of some sort, but I don't remember exactly how. I seem to remember that a user's home directory may be one place, but you'd better check Sun's docs. Under some versions of Windows (especially if the user doesn't log into a LAN) there may not BE a home dirctory.
"privilege" comes from the Latin words for "private" and "law" (legal) and dates to feudal times. To "claim privilege" meant that you were above the laws that applied to the common people.
Here. Have a potato. I grew it in my armpit. And from my other armpit, this tiny ad:
Devious Experiments for a Truly Passive Greenhouse!