Sure, here is the discovery powershell script, it checks if the key exists and
has a value of 0, if it does not have a value of 0 the second script runs and
adds the key/value.
Discovery:
$Status = (Get-ItemProperty 'HKLM:\SOFTWARE\Policies\Adobe\Acrobat
Reader\11.0\FeatureLockdown\').bUpdater
if($Status -eq 0)
{Write-Host 'Compliant'}
else
{Write-Host 'Non-Compliant'}
Remediation:
New-ItemProperty 'HKLM:\SOFTWARE\Policies\Adobe\Acrobat
Reader\11.0\FeatureLockDown\' -Name bUpdater -Value 0 -PropertyType DWord -Force
This is obviously only for Adobe Reader XI but we currently have no need to
upgrade to the new clunky looking version.
Chris
From: [email protected] [mailto:[email protected]] On
Behalf Of Linkey, Mike
Sent: Thursday, January 21, 2016 11:30 AM
To: [email protected]
Subject: [mssms] RE: What are you using configuration baselines for?
We Disable PST write/creation and disable USB write permissions. I am
interested in what you have done for Adobe if you are willing to share.
Is there a list of what folks have done that people can get them from?
Mike L.
From: [email protected]<mailto:[email protected]>
[mailto:[email protected]] On Behalf Of Chris Carbone
Sent: Thursday, January 21, 2016 11:08 AM
To: [email protected]<mailto:[email protected]>
Subject: [mssms] What are you using configuration baselines for?
Hello all,
I just recently gained access to configuration baselines in SCCM and so far
I've created one for Adobe Reader to turn off automatic updates. Then I created
another for verifying all our servers have all the printers installed in our
environment.
I wanted to survey all of you wonderful people and find out what baselines you
are getting the most use out of?
Thanks!
This electronic mail transmission may contain confidential information intended
only for the use of the individual(s) identified as addressee(s). If you are
not the intended recipient, you are hereby notified that any disclosure,
copying, distribution or the taking of any action in reliance on the contents
of this electronic mail transmission is strictly prohibited. If you have
received this transmission in error, please notify me by telephone immediately.
This electronic mail transmission may contain confidential information intended
only for the use of the individual(s) identified as addressee(s). If you are
not the intended recipient, you are hereby notified that any disclosure,
copying, distribution or the taking of any action in reliance on the contents
of this electronic mail transmission is strictly prohibited. If you have
received this transmission in error, please notify me by telephone immediately.
