Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Just made a preference change in Adobe Reader 11.0 for one computer. How can I deploy the same change for 490 computers?

Posted on 2015-02-02
7
Medium Priority
?
444 Views
Last Modified: 2015-02-14
Made a preference change to Adobe Reader 11.0 to fix an issue on a computer KIOSK that we built (Windows OS 7 Embedded). The issue is with Runtime crash when opening PDFs. We need to apply the same preference change for 490 more computer KIOSK. How can I deploy the new preference changes that was made on one machine to the other 490 remote machines? Can this be done through GPO or PSEXEC?
0
Comment
Question by:joukiejouk
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
  • 2
7 Comments
 
LVL 8

Expert Comment

by:nader alkahtani
ID: 40585549
0
 
LVL 24

Expert Comment

by:VB ITS
ID: 40586246
The easiest way to do this is through Group Policy Preferences, which you can use to deploy registry entries. You will need a Domain Controller running at least Windows Server 2008 though.

What was this change you made in Adobe Reader specifically so that we try and work out what registry entry needs to be deployed here.
0
 

Author Comment

by:joukiejouk
ID: 40586609
The changes that need to be applied is

1. Unchecking "Display in Read Mode by default" and unchecking "Enable Protected Mode at startup".

adobe changeadobe change_1
Also, when I am in the registry, I do not see a value for "bProtectedMode". Any ideas?

reg
0
Visualize your virtual and backup environments

Create well-organized and polished visualizations of your virtual and backup environments when planning VMware vSphere, Microsoft Hyper-V or Veeam deployments. It helps you to gain better visibility and valuable business insights.

 
LVL 8

Expert Comment

by:nader alkahtani
ID: 40586696
Warning : backup registry before any changes.
Check this out
http://www.grouppolicy.biz/2012/10/how-to-configure-group-policy-for-adobe-reader-xi/
0
 
LVL 24

Accepted Solution

by:
VB ITS earned 1500 total points
ID: 40587547
@Nader Al-Kahtani: while those Group Policy templates from Adobe are nice and all, they don't currently cover all the settings that most people want to disable. I know, I tried deploying them the other day in a new TS environment and I ended up just using Group Policy Preferences instead to roll out registry changes.

Back on topic. @joukiejouk, you can roll out the below registry keys to deploy these settings on a large scale:

To disable Display In Read Mode by default:
Key: HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\11.0\AVGeneral
Value: bBrowserDisplayInReadMode (REG_DWORD)
Data: 0

To disable Enable Protected Mode at startup:
Key: HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\11.0\Privileged
Value: bProtectedMode (REG_DWORD)
Data: 0

Also, when I am in the registry, I do not see a value for "bProtectedMode". Any ideas?
The FeatureLockDown area is reserved for locking down certain aspects of Adobe Reader, hence the words "lockdown" in the name of the registry key.

You need to actually manually create the registry values in the FeatureLockDown area, they don't get created automatically when you make a change to the preferences.

Just so you get an idea of how this all works, if we create the bProtectedMode registry value in the FeatureLockDown area then users simply won't be able to turn Protected Mode on or off. Whereas if we change the bProtectedMode registry value in HKCU\Software\Adobe\Acrobat Reader\11.0\Privileged then users can turn Protected Mode on or off.

Whichever method you use is up to you. I'd personally probably be more inclined to stick with the FeatureLockDown area for the Protected Mode setting to prevent any potential issues. I don't think we can lock down the Read Mode setting though unfortunately.

If you need help deploying these registry settings through Group Policy Preferences then see this article for the steps (go with the Example 2 method): http://blog.thesysadmins.co.uk/group-policy-preferences-1-deploying-registry-settings.html
0
 

Author Comment

by:joukiejouk
ID: 40587989
@VB ITS. Tried your method, but it did not work. Just to clarify, doesn't the registry change need to be made in computer configuration rather than user configuration? I followed your step to create the registry on Domain Controller (Server 2008) using GPMC. I created the object and linked it the proper OU. I ran gpupdate /force on the DC, and on the actual workstation, I ran update force as well. I ran a gpresult on the local machine, but did not see the GPO applied. I even tried rebooting the workstation, but to no avail.
0
 
LVL 24

Expert Comment

by:VB ITS
ID: 40593188
@VB ITS. Tried your method, but it did not work. Just to clarify, doesn't the registry change need to be made in computer configuration rather than user configuration?
No, those keys are user level settings as the relevant keys reside in the HKEY_CURRENT_USER hive and not the HKEY_LOCAL_MACHINE hive so you have to place them in the User Configuration section of the GPO.

You will then need to link the GPO to the OU where your users are located, wait for AD replication, then log out and log back in for the policy to apply.
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…

610 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question