Solved

Just made a preference change in Adobe Reader 11.0 for one computer. How can I deploy the same change for 490 computers?

Posted on 2015-02-02
7
349 Views
Last Modified: 2015-02-14
Made a preference change to Adobe Reader 11.0 to fix an issue on a computer KIOSK that we built (Windows OS 7 Embedded). The issue is with Runtime crash when opening PDFs. We need to apply the same preference change for 490 more computer KIOSK. How can I deploy the new preference changes that was made on one machine to the other 490 remote machines? Can this be done through GPO or PSEXEC?
0
Comment
Question by:joukiejouk
  • 3
  • 2
  • 2
7 Comments
 
LVL 8

Expert Comment

by:nader alkahtani
ID: 40585549
0
 
LVL 24

Expert Comment

by:VB ITS
ID: 40586246
The easiest way to do this is through Group Policy Preferences, which you can use to deploy registry entries. You will need a Domain Controller running at least Windows Server 2008 though.

What was this change you made in Adobe Reader specifically so that we try and work out what registry entry needs to be deployed here.
0
 

Author Comment

by:joukiejouk
ID: 40586609
The changes that need to be applied is

1. Unchecking "Display in Read Mode by default" and unchecking "Enable Protected Mode at startup".

adobe changeadobe change_1
Also, when I am in the registry, I do not see a value for "bProtectedMode". Any ideas?

reg
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 8

Expert Comment

by:nader alkahtani
ID: 40586696
Warning : backup registry before any changes.
Check this out
http://www.grouppolicy.biz/2012/10/how-to-configure-group-policy-for-adobe-reader-xi/
0
 
LVL 24

Accepted Solution

by:
VB ITS earned 500 total points
ID: 40587547
@Nader Al-Kahtani: while those Group Policy templates from Adobe are nice and all, they don't currently cover all the settings that most people want to disable. I know, I tried deploying them the other day in a new TS environment and I ended up just using Group Policy Preferences instead to roll out registry changes.

Back on topic. @joukiejouk, you can roll out the below registry keys to deploy these settings on a large scale:

To disable Display In Read Mode by default:
Key: HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\11.0\AVGeneral
Value: bBrowserDisplayInReadMode (REG_DWORD)
Data: 0

To disable Enable Protected Mode at startup:
Key: HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\11.0\Privileged
Value: bProtectedMode (REG_DWORD)
Data: 0

Also, when I am in the registry, I do not see a value for "bProtectedMode". Any ideas?
The FeatureLockDown area is reserved for locking down certain aspects of Adobe Reader, hence the words "lockdown" in the name of the registry key.

You need to actually manually create the registry values in the FeatureLockDown area, they don't get created automatically when you make a change to the preferences.

Just so you get an idea of how this all works, if we create the bProtectedMode registry value in the FeatureLockDown area then users simply won't be able to turn Protected Mode on or off. Whereas if we change the bProtectedMode registry value in HKCU\Software\Adobe\Acrobat Reader\11.0\Privileged then users can turn Protected Mode on or off.

Whichever method you use is up to you. I'd personally probably be more inclined to stick with the FeatureLockDown area for the Protected Mode setting to prevent any potential issues. I don't think we can lock down the Read Mode setting though unfortunately.

If you need help deploying these registry settings through Group Policy Preferences then see this article for the steps (go with the Example 2 method): http://blog.thesysadmins.co.uk/group-policy-preferences-1-deploying-registry-settings.html
0
 

Author Comment

by:joukiejouk
ID: 40587989
@VB ITS. Tried your method, but it did not work. Just to clarify, doesn't the registry change need to be made in computer configuration rather than user configuration? I followed your step to create the registry on Domain Controller (Server 2008) using GPMC. I created the object and linked it the proper OU. I ran gpupdate /force on the DC, and on the actual workstation, I ran update force as well. I ran a gpresult on the local machine, but did not see the GPO applied. I even tried rebooting the workstation, but to no avail.
0
 
LVL 24

Expert Comment

by:VB ITS
ID: 40593188
@VB ITS. Tried your method, but it did not work. Just to clarify, doesn't the registry change need to be made in computer configuration rather than user configuration?
No, those keys are user level settings as the relevant keys reside in the HKEY_CURRENT_USER hive and not the HKEY_LOCAL_MACHINE hive so you have to place them in the User Configuration section of the GPO.

You will then need to link the GPO to the OU where your users are located, wait for AD replication, then log out and log back in for the policy to apply.
0

Featured Post

Simplifying Server Workload Migrations

This use case outlines the migration challenges that organizations face and how the Acronis AnyData Engine supports physical-to-physical (P2P), physical-to-virtual (P2V), virtual to physical (V2P), and cross-virtual (V2V) migration scenarios to address these challenges.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

We recently endured a series of broadcast storms that caused our ISP to shut us down for brief periods of time. After going through a multitude of tests, we determined that the issue was related to Intel NIC drivers on some new HP desktop computers …
Are you one of those front-line IT Service Desk staff fielding calls, replying to emails, all-the-while working to resolve end-user technological nightmares? I am! That's why I have put together this brief overview of tools and techniques I use in o…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question