Java detected as "enabled" but we can't find it

We have a policy blocking access to applications if Java is installed. We have a user being blocked for having Java, the Duo log simply says Java is “enabled”, it doesn’t show a version. As best I can tell, the machine in question has not had a Java install, doesn’t currently have it installed, and the Java installer/uninstaller doesn’t find an install to be able to remove. Is there something else that should be looked at?