Bill- You can set permissions with GP which would be more flexible IMO.
--brian Thanks, Brian Desmond [email protected] c - 312.731.3132 From: Bill Songstad [mailto:[email protected]] Sent: Monday, April 19, 2010 12:33 PM To: NT System Admin Issues Subject: Re: Locking adobe Well locking the registry perms was effective and had no immediately obvios side-effects on Acrobat Reader's function. I'm not sure if that will hold true through updates and patches though. The process gets kind of ugly considering we are dealing with HKCU too. I can have the users run a script to lock themselves out of the reg key, but undoing it is a nightmare of finding the all the correct ids on the computer for all the users and changing the perms in the HKU tree. Much easier to give away than to take back it seems. Somehow, I think its best to persue another strategy. -Bill On Fri, Apr 16, 2010 at 3:59 PM, Peter van Houten <[email protected]<mailto:[email protected]>> wrote: Would be interested in the results. As Brian pointed out, the Reader might not enjoy having its "private parts" locked ;-) -- Peter van Houten Bill Songstad wrote the following: Shamefully, I never thought of locking down the perms on the reg key. I'll monkey with that and post back with my results. -Bill On Fri, Apr 16, 2010 at 3:39 PM, Peter van Houten <[email protected]<mailto:[email protected]> <mailto:[email protected]<mailto:[email protected]>>> wrote: Have you tried changing the permissions of the reg key? -- Peter van Houten Bill Songstad wrote the following: Okay, I've figured out how to disable the /launch feature in Acrobat Reader, and make it so users can't easily undo it. But I can't for the life of me turn of jscript and make it sticky. [HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\9.0\JSPrefs] "bEnableJS"=dword:00000000 will turn off javascript within Acrobat Reader, but the user can just turn it back on, In fact if a java enabled document is opened, the user is prompted to enable it. Does anybody have a good strategy for keeping javascript disabled in Acrobat Reader? Thanks, -Bill ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
