Solved

Just made a preference change in Adobe Reader 11.0 for one computer. How can I deploy the same change for 490 computers?

Posted on 2015-02-02
7
359 Views
Last Modified: 2015-02-14
Made a preference change to Adobe Reader 11.0 to fix an issue on a computer KIOSK that we built (Windows OS 7 Embedded). The issue is with Runtime crash when opening PDFs. We need to apply the same preference change for 490 more computer KIOSK. How can I deploy the new preference changes that was made on one machine to the other 490 remote machines? Can this be done through GPO or PSEXEC?
0
Comment
Question by:joukiejouk
  • 3
  • 2
  • 2
7 Comments
 
LVL 8

Expert Comment

by:nader alkahtani
ID: 40585549
0
 
LVL 24

Expert Comment

by:VB ITS
ID: 40586246
The easiest way to do this is through Group Policy Preferences, which you can use to deploy registry entries. You will need a Domain Controller running at least Windows Server 2008 though.

What was this change you made in Adobe Reader specifically so that we try and work out what registry entry needs to be deployed here.
0
 

Author Comment

by:joukiejouk
ID: 40586609
The changes that need to be applied is

1. Unchecking "Display in Read Mode by default" and unchecking "Enable Protected Mode at startup".

adobe changeadobe change_1
Also, when I am in the registry, I do not see a value for "bProtectedMode". Any ideas?

reg
0
Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

 
LVL 8

Expert Comment

by:nader alkahtani
ID: 40586696
Warning : backup registry before any changes.
Check this out
http://www.grouppolicy.biz/2012/10/how-to-configure-group-policy-for-adobe-reader-xi/
0
 
LVL 24

Accepted Solution

by:
VB ITS earned 500 total points
ID: 40587547
@Nader Al-Kahtani: while those Group Policy templates from Adobe are nice and all, they don't currently cover all the settings that most people want to disable. I know, I tried deploying them the other day in a new TS environment and I ended up just using Group Policy Preferences instead to roll out registry changes.

Back on topic. @joukiejouk, you can roll out the below registry keys to deploy these settings on a large scale:

To disable Display In Read Mode by default:
Key: HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\11.0\AVGeneral
Value: bBrowserDisplayInReadMode (REG_DWORD)
Data: 0

To disable Enable Protected Mode at startup:
Key: HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\11.0\Privileged
Value: bProtectedMode (REG_DWORD)
Data: 0

Also, when I am in the registry, I do not see a value for "bProtectedMode". Any ideas?
The FeatureLockDown area is reserved for locking down certain aspects of Adobe Reader, hence the words "lockdown" in the name of the registry key.

You need to actually manually create the registry values in the FeatureLockDown area, they don't get created automatically when you make a change to the preferences.

Just so you get an idea of how this all works, if we create the bProtectedMode registry value in the FeatureLockDown area then users simply won't be able to turn Protected Mode on or off. Whereas if we change the bProtectedMode registry value in HKCU\Software\Adobe\Acrobat Reader\11.0\Privileged then users can turn Protected Mode on or off.

Whichever method you use is up to you. I'd personally probably be more inclined to stick with the FeatureLockDown area for the Protected Mode setting to prevent any potential issues. I don't think we can lock down the Read Mode setting though unfortunately.

If you need help deploying these registry settings through Group Policy Preferences then see this article for the steps (go with the Example 2 method): http://blog.thesysadmins.co.uk/group-policy-preferences-1-deploying-registry-settings.html
0
 

Author Comment

by:joukiejouk
ID: 40587989
@VB ITS. Tried your method, but it did not work. Just to clarify, doesn't the registry change need to be made in computer configuration rather than user configuration? I followed your step to create the registry on Domain Controller (Server 2008) using GPMC. I created the object and linked it the proper OU. I ran gpupdate /force on the DC, and on the actual workstation, I ran update force as well. I ran a gpresult on the local machine, but did not see the GPO applied. I even tried rebooting the workstation, but to no avail.
0
 
LVL 24

Expert Comment

by:VB ITS
ID: 40593188
@VB ITS. Tried your method, but it did not work. Just to clarify, doesn't the registry change need to be made in computer configuration rather than user configuration?
No, those keys are user level settings as the relevant keys reside in the HKEY_CURRENT_USER hive and not the HKEY_LOCAL_MACHINE hive so you have to place them in the User Configuration section of the GPO.

You will then need to link the GPO to the OU where your users are located, wait for AD replication, then log out and log back in for the policy to apply.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This is the first one of a series of articles I’ll be writing to address technical issues that are always referred to as network problems. The network boundaries have changed, therefore having an understanding of how each piece in the network  puzzl…
OfficeMate Freezes on login or does not load after login credentials are input.
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…

860 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question