Enable Protected Mode at startup

Forum|Forum|15 years ago
January 19, 2011
3 replies
24748 views

I am deploying Adobe Reader X by Microsoft System Centre Configuration Manager. I have created a package using the Customisation Wizard. I have 3 Registry changes included. 1, Change unts from inches to centimeters. 2. Change spelling dictionary from US to UK. and 3. uncheck the "Enable Protected Mode at startup" option. Our workstations are Windows XP SP3. The problem is that although the units and spelling options are passed through on installation the "Enable Protected Mode at startup" does not. I can see it creates the registry key successfully in the S-1-5-18 registry location but when I launch Adobe Reader for the first time the Privileged key is created but fails to pass the REG_DWORD called bProtectedMode from the S-1-5-18 registry location to the HKCU registry hive. Does anyone have any idea why this happens and how to fix it? I need this option unchecked as PDF documents on some network drives fail to open citing "Access Denied" if it is checked. Any help appreciated. Wayne

This topic has been closed for replies.

A

Anonymous

I Use

HKLM\Software\Policies\Adobe\Acrobat Reader\10.0\FeatureLockDown\bProtectedMode with a value of 0

& this seems to work fine. Could you let me know what you use for your other two keys as I cant find them anywhere

1. Change unts from inches to centimeters. 2. Change spelling dictionary from US to UK

V

vdobhal

Adobe Employee

Moreover the reason can be found at the following link:

http://www.sepago.de/helge/2009/08/12/registry-fun-working-with-hive-files/

"...although the local SYSTEM account does have a profile (located in %systemroot%\system32\config\systemprofile), its registry hive is not mounted. Instead, HKU\S-1-5-18 is a link to HKU\.Default"

V

vdobhal

Adobe Employee

Hi Wayne,

HKEY_USERS \ S-1-5-18 is the loaded profile for SYSTEM account. You can instead create an entry in HKCU using the Customization Wizard and this works.

I created the following key using CW:

[HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\10.0\Privileged]
"bProtectedMode"=dword:00000000

When I deployed the modified Reader, the Protected Mode is disabled by default.

Thanks,

Vinod

W

wayne_OAuthor

Participant

Thanks Vinod, I already have the setting for the Destination Computer in the Customization Wizard as shown in the image. I then deploy using System Centre Configuration Manager and the setting does not come over. The others do. SCCM uses the SYSTEM account to deploy.