Hello community,
is there a solution to customize the default Adobe Reader Preferences in Windows central (group policies, registry, etc...)?
So that a certain preference - in the current case "basic tools" -> "use fixed resolution for snapshot tool images" - can be configured central to enable all users forever the certain preference as default in a terminalserver environment with a daily reboot from a master image.
I hope someone has a solution for this request!
Many greetings
We are currently having an issue with Activation. Sometimes our users will be asked to activate Adobe multiple times during a session.
We are running a Citrix XenDesktop environment and have about 10 people using Adobe in this server. The server is non persistent so after every reboot all configuration is wiped. AppData is redirected per user, so If a setting is saved there it will be available the next time they sign in.
I am trying to install on a desktop (and have done so successfully on seven other computers), and I keep getting a "trial has expired" error. ONLY ON Acrobat DC. InDesign and Photosho installed fine.
Help!
Thanks for the reply! It works perfectly that way. You have helped me a lot.
But I still do not understand why in the sequence of versions the way over the MSIEXEC installation stops working. Was this documented somewhere? The way through the bootstrapper is indeed contained in the administration documentation, but not that he is the only effective.
this worked for me as well, it seems to be an issue exasperated by bouncing between laptop and monitors
How do i get new downloads to register with my enterprise subscription and not have to purchase for each installation?
I am trying to find a way to detect the version of Acrobat installed on a computer. Since the 2017 install file is the same for Standard and Professional, my discovery tool shows them as the same software title. Is there a way to tell the difference between the two? Such as the build number that I can see the system to scan for.
Hi frankm,
As per the issue description mentioned above, you want to know the version of Acrobat installed on the machine, is that correct?
Please refer to the steps given in the following help document for the same: Identifying Existing Installs — Enterprise Administration Guide
Thanks,
Shivam
this is a very simplistic answer, and doesn't seem to be answering the question.
Does this mean all files from the internet are viewed as unsafe? if said file is downloaded to the downloads folder, is it still unsafe? what if it's downloaded to documents?
If i download a pdf from the internet, and keep it in my documents, will i constantly have this file flagged?
how does adobe reader determine if the file is unsafe? is it based on the location of the file (IE, what folder it's in), or based on a characteristic of the file in question, and if that's the case, how does it identify that characteristic.
EnterpriseHelp, when building a custom deployment, the locations set using the deployment wizard don't show up in the application itself. for example, if I added https://www.google.com as trusted host, when I installed the application, that host would not be listed as a trusted host. however, if you open up the PC's registry, HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Adobe\Acrobat Reader\2017\FeatureLockDown\cTrustedSites\cTrustedForPV does have a dword for t0_recursive as a string for https://www.google.com.
The settings are being applied, however the application isn't recognizing them as trusted (or they are recognizing them, but they aren't showing up in the installed application as a trusted site)
I was hoping to use c:\%userprofile%\documents as a trusted folder, to indicate anything in the logged on users documents folder is trusted, but it appears that is not the case. Is there anyway to identify a folder in the current user's profile (that changes based on which user logs on) so we can always mark their desktop and documents as a trusted folder, but their download and temp files within their profile are not?
I am currently building a custom package for Adobe Reader 2017 (classic track), using the Adobe Acrobat Customization Wizard DC (2015).
My goal is to have protected mode enabled for all files, except those I designate. In this case, I want the logged in user's desktop and documents to show up as trusted, as well as an file that is launched from within our fileserver. Sounds pretty simple right?
Here are the settings:
After doing some digging, it seems that the system variables are not support, so question 1 is how can I allow only those two folders within the user's profile to be listed as trusted, while not having their downloads folder or any temp cache folder being included? I have 5000 or so users, all with unique user names, so manually setting them is not feasible
Once I installed the application, I went to security settings, and this is what was listed:
It was originally blank, so I added the local user's documents folder. However, none of the hosts or trusted folders were listed. Based on this, I assumed that the settings that were set in the custom wizard were not applied, so I went to the registry to see what it said, with this results, taken from the HKLM registry hive:
and
So it looks like the settings applied properly, however the application isn't applying them or even listing them as trusted sites within the app. Is this a bug in Adobe Reader 2017, and if so, how does it get fixed?
I did look and the locally created settings, and they were saved in the HKCU section:
With the settings manually entered, the settings did apply as appropriate. Documents opened from within that folder were not opened in protected mode, while those that were opened from my file server were opened in protected mode (as were all pdfs that were opened not from the documents folder).
I've looked at Security — Acrobat Customization Wizard DC for Windows and Trust Methods — Acrobat Application Security Guide and based in everything I am reading, I am doing it correctly, yet the settings aren't applying properly; in fact, it doesn't look like the HKLM registry keys are applying at all, which is what the customization wizard uses.
So my second question is, Does anyone know a fix for this? EnterpriseHelp
Read the ETK's Sandbox Protections section for a little more detail.
Hello,
we are trying to install Acrobat Pro via Adobe Customization Wizard on a Terminalserver environment. Installation works fine, however we have some users which use the German language pack, and others using English. I'm trying to achieve Acrobat to ask users, for the first time they start the client, which language they would prefer. Currently it always selects German as default, since this is our system language.
Is there any solution for this via Customization Wizard or registry, to force Acrobat displaying the language selection popup?
I would appreciate any help.
Kind regards,
Morris
Moving this query to the correct community Installing, Updating, & Subscribing to Acrobat .
Hi Morris,
As per the issue description mentioned above, you want users to select the language for Acrobat DC upon launch, is that correct?
You may check the language selection option upon Acrobat's launch by pressing Ctrl when launching Acrobat, This will asks users to select the language for Acrobat. Refer to this forum thread for more info: How to change application language in Acrobat Pro DC?
You may also check language option under Acrobat's preferences by clicking Edit > Preferences > Language > Application language > choose at application startup.
You can also check the customization wizard's installation option here: Language Support and Configuration — Enterprise Administration Guide
Preference Reference for Acrobat and Adobe Reader
Thanks,
Shivam
That actually helps to customize the zones, but I can't get it to apply to Windows 7 (and It doesn't explain what the default settings are, only how to customize it).
When I do try to create a custom whitelist, I experience the same issue I am experiencing when using the custom wizard, it seems that the HKLM registry settings have no effect on the application. I created a separate posting at Adobe Reader 2017 privileged locations not working , but in general, it seems changes make in the HKLM hive are not being applied, including the ProtectedModeWhitelistConfig.txt that the sandbox protections uses (but the HKCU settings are, so manual changes do work).
Have you confirmed that it actually works? I can see the keys present in the registry, but the application is ignoring them.
We were having a similar issue on our VDIs with Win 10 v1709, issue turned out to be Windows Defender Exploit Protection security setting. The settings applied are as follows:
<AppConfig Executable="Acrobat.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" HighEntropy="false" />
<Payload EnableExportAddressFilter="true" EnableExportAddressFilterPlus="true" EnableImportAddressFilter="true" EnableRopStackPivot="true" EnableRopCallerCheck="true" EnableRopSimExec="true" />
</AppConfig>
<AppConfig Executable="AcroRd32.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" HighEntropy="false" />
<Payload EnableExportAddressFilter="true" EnableExportAddressFilterPlus="true" EnableImportAddressFilter="true" EnableRopStackPivot="true" EnableRopCallerCheck="true" EnableRopSimExec="true" />
</AppConfig>
If you do not apply the setting or apply the following Windows Defender Exploit Protection settings then uninstall/re-install the Adobe application issue is resolved:
<AppConfig Executable="Acrobat.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
</AppConfig>
<AppConfig Executable="AcroRd32.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
</AppConfig>
I am looking to use MS Intune or possibly Solarwinds for deployment. Has anyone been able to do this?
Many thanks,
Allan
I have looked over this site and have found ways to manually remove the software. Is there a way to silently remove it from a MAC?
Thanks,
NC
i assume this is an enterprise uninstall.
[moved from Installing, Updating, & Subscribing to Acrobat to Enterprise Deployment (Acrobat and Reader)]