GPO to prevent javascript ADM not working

Hi,

I created a GPO with the ADM to prevent javascript from launching in adobe reader (shows below)
I linked it to a test group
Edited the policy to say disable for all the adobe javascript ( it shows under user settings)

On myworkstation I did a gpupdate / force
Reboot
Look in the registry and dont see the settings, also it is not preventing Javascript
what can i be doing wrong

Please help
CLASS USER
 
CATEGORY "Adobe Acrobat/Reader 6.x - 9.x"
 
POLICY "JavaScript Reader 9.x"
KEYNAME "Software\Adobe\Acrobat Reader\9.0\JSPrefs"
EXPLAIN "Enable or Disable JavaScript in Acrobat Reader 9.x"
VALUENAME "bEnableJS"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
 
POLICY "JavaScript Acrobat 9.x"
KEYNAME "Software\Adobe\Adobe Acrobat\9.0\JSPrefs"
EXPLAIN "Enable or Disable JavaScript in Acrobat 9.x"
VALUENAME "bEnableJS"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
 
 
POLICY "JavaScript Reader 8.x"
KEYNAME "Software\Adobe\Acrobat Reader\8.0\JSPrefs"
EXPLAIN "Enable or Disable JavaScript in Acrobat Reader 8.x"
VALUENAME "bEnableJS"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
 
POLICY "JavaScript Acrobat 8.x"
KEYNAME "Software\Adobe\Adobe Acrobat\8.0\JSPrefs"
EXPLAIN "Enable or Disable JavaScript in Acrobat 8.x"
VALUENAME "bEnableJS"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
 
POLICY "JavaScript Reader 7.x"
KEYNAME "Software\Adobe\Acrobat Reader\7.0\JSPrefs"
EXPLAIN "Enable or Disable JavaScript in Acrobat Reader 7.x"
VALUENAME "bEnableJS"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
 
POLICY "JavaScript Acrobat 7.x"
KEYNAME "Software\Adobe\Adobe Acrobat\7.0\JSPrefs"
EXPLAIN "Enable or Disable JavaScript in Acrobat 7.x"
VALUENAME "bEnableJS"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
 
POLICY "JavaScript Reader 6.x"
KEYNAME "Software\Adobe\Acrobat Reader\6.0\JSPrefs"
EXPLAIN "Enable or Disable JavaScript in Acrobat Reader 6.x"
VALUENAME "bEnableJS"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
 
POLICY "JavaScript Acrobat 6.x"
KEYNAME "Software\Adobe\Adobe Acrobat\6.0\JSPrefs"
EXPLAIN "Enable or Disable JavaScript in Acrobat 6.x"
VALUENAME "bEnableJS"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
 
END CATEGORY

Open in new window

neoptoentAsked:
Who is Participating?
 
ngailfusConnect With a Mentor Commented:
From the command line run gpresult.  It will list all the GPO's applied to that PC and login.
0
 
Jason WatkinsIT Project LeaderCommented:
Have all of the DCs in your organization converged and received the new template?

0
 
neoptoentAuthor Commented:
I dont know if all my dc's go it yet, I created it on the primary dc
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
ngailfusCommented:
You can check to see if the Group Policy has been replicated by running gpotool /checkacl.  This will compair the group policy objects on each domain controller to see if they all match.
0
 
neoptoentAuthor Commented:
this is what I see when I do gpresult
 
The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
    ADOBE Javascript
        Filtering:  Not Applied (Empty)
0
 
neoptoentAuthor Commented:
Ahh I think I got it
 
Will a regular user be able to just re-enable javascript in adobe?
0
 
Philip ElderTechnical Architect - HA/Compute/StorageCommented:
Your settings are machine specific. Did you add your workstation to the Test Group prior to GPUpdate /force?

You may need to move the workstation into the OU you created and linked the new the GPO to if you created one (hopefully).

Philip
0
 
neoptoentAuthor Commented:
I think the issue was that it was a user configuration not computer. So the OU I created was for the resources not the user.
Now I created a user group and it applies it.
When I open reader on  my workstation it tells me java is disabled and asks if I want to enable it....
Will all users have that ability?
0
 
ngailfusCommented:
I would assume that that dialog will appear for each user initially.  Is there a checkbox stating to not ask again?  Perhaps that is a registry entry that can be modified.
0
 
Philip ElderConnect With a Mentor Technical Architect - HA/Compute/StorageCommented:
Once the Javascript has been disabled, the next step is to educate users on the reason why there is a need to disable the feature.
Between the two, hopefully the threat can be mitigated.
Philip
0
 
ngailfusCommented:
I tried to recreate the dialog prompt by disabling the javascript on my PC.  The dialog did not popup for me when I opened Adobe Reader 9.  Perhaps because the PDF I opened did not have a javascript element.
0
 
neoptoentAuthor Commented:
Is there a way to suppresss that dialogue box so the users dont get the option?
0
All Courses

From novice to tech pro — start learning today.