none
Registry settings for adobe reader

    Question

  • I want to propagate a adobe reader setting that does the following:

    1. Change the Adobe reader setting (Trust ALL root certificates in the Windows Certificate Store for: validating signature)

    2. Disable this setting (should be greyed out) from being changed

    How can I achieve this?

    Sunday, January 24, 2016 11:01 AM

Answers

All replies

  • Hi,
     
    Am 24.01.2016 um 12:01 schrieb Prozin:
    > 1. Change the Adobe reader setting (Trust ALL root certificates in the
    > Windows Certificate Store for: validating signature)
     
    If it´s not inside the Adobe ADMX Templates provided by Adobe, you need
    to research and propagade the registry value with GPP (if it exists)
     
    > 2. Disable this setting (should be greyed out) from being changed
     
    "grey out" is a interaction with the .\policies\.. registry entry.
    developed by the Adobe programmers. If it´s not in the ADMX, it usually
    will be a preference, not a policy and it will remain changeable during
    the users session until the GPP applies again.
     
    Mark
    --
    Mark Heitbrink - MVP Windows Server - Group Policy
     
    GPO Tool: http://www.reg2xml.com - Registry Export File Converter
     
    Sunday, January 24, 2016 9:57 PM
  • you need to research and propagade the registry value with GPP (if it exists)

    We usually use Process Monitor to capture the registry value for a specific option:
     
    https://technet.microsoft.com/en-us/sysinternals/processmonitor.aspx
     
    Just did some research and found this article from Adobe website, which seems have related information mentioned:
     
    https://www.adobe.com/devnet-docs/acrobatetk/tools/PrefRef/Windows/Security.html#idkeyname_1_14091
     
    (Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.)
     

    Regards,

    Ethan Hua


    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com

    • Marked as answer by Prozin Saturday, February 6, 2016 6:31 AM
    Monday, January 25, 2016 6:19 AM
    Moderator
  • Thanks Mark, and Ethan for quick replies. Ethan the process monitor worked for me.
    Saturday, February 6, 2016 6:31 AM
  • it seems that these registry settings are responsible for effect

    [HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\\DC\Security\cASPKI\cAdobe_LTVProvider]
    "iAutoAddLTV"=dword:00000002

    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cSecurity\cASPKI\cMSCAPI_DirectoryProvider]
    "bMSStoreTrusted"=dword:00000000

    [HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\DC\Security\cASPKI\cMSCAPI_DirectoryProvider]
    "iMSStoreTrusted"=dword:00000062

    from https://www.adobe.com/devnet-docs/acrobatetk/tools/PrefRef/Windows/Security.html#WindowsIntegration

    Wednesday, July 12, 2017 9:59 AM