This is an expected and required action for these types of .adm files. Fully managed policies are un-done when the policy is removed. To reverse this policy setting you must leave the policy applied and change the settings and leave the policy in place long enough for all clients to pick up the change.
Carl From: Mike Gill [mailto:[email protected]] Sent: Monday, February 23, 2009 1:04 PM To: NT System Admin Issues Subject: RE: Adobe 0-day I just installed this, and got no errors, but there were no settings visible to set. I changed the Filter for this view and unchecked "Only show policy settings that can be fully managed" and then I could see all the settings. I'm not a Group Policy expert, but is this a mistake in the Adobe template, or do most people uncheck that check box and are there little to no ramifications in doing so? -- Mike Gill From: Carl Houseman [mailto:[email protected]] Sent: Monday, February 23, 2009 6:56 AM To: NT System Admin Issues Subject: RE: Adobe 0-day GPO template: http://www.shadowserver.org/wiki/uploads/Calendar/adobe.txt Carl From: James Rankin [mailto:[email protected]] Sent: Monday, February 23, 2009 9:43 AM To: NT System Admin Issues Subject: Re: Adobe 0-day I was searching for a way to disable this en masse on my Citrix servers, but can't find any mention of a reg key or similar way of doing it 2009/2/23 David Lum <[email protected]> Anyone doing anything about this? http://www.shadowserver.org/wiki/pmwiki.php?n=Calendar.20090221 I thought I saw a thread here last week about it, but can find nothing.. David Lum // SYSTEMS ENGINEER NORTHWEST EVALUATION ASSOCIATION (Desk) 971.222.1025 // (Cell) 503.267.9764 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
