Security Settings

[SeriousErrorHasOccured]

Does anyone know how I can configure client's security settings in Acrobat via a centrally managed location?

I need to be able to set security settings so when users print to pdf the document has the security applied and the user didn't need to do anything.

Settings I'd like to configure on clients:

Adobe PDF - Security:

Restrict editing and printing of the document. A password will be required in order to change these permission setings.

pre-set the password

Prinint allowed: high resolution
Changes allowed: none

uncheck, enable copying of text, images and other content.

check, enable text access for screen reader devices andthe visually impaired

I would also like to set their printer preferences:

Default settings: standard

Adobe PDF Security: Use the last known security settings (which would be the above)

Adobe PDF output folder: prompt for adobe pdf filename

Adobe PDF page size: A4

check. view adobe pdf results

check, add document information

uncheck, rely on system fonts only; do not use document fonts

check, delete log files for successful jobs

check, ask to replace existing pdf file

Thank you

[EnterpriseHelp]

I'm going to assume you only need to know about the first part of your question (configure settings) and that you know the "central location" part (GPO, scripts, or any other preference propagation method).

Start with the ETK to learn about preferences generally: www.adobe.com/go/acrobatetk.

Then (since all those settings aren't documented), do the following:

1. Get regshot.
2. Close all apps.
3. Open Acrobat.
4. Take a regshot snapshot.
5. Configure all the settings you need.
6. Close Acrobat.
7. Take another snapshot.
8. See what's changed. Those are the settings you want.

I don't think you can preset a password however. I think that's stored in an acrodata file. You could try copying that file to other machines, but I haven't tried it and my first thought is it's not possible.

hth,

Ben

[SeriousErrorHasOccured]

Thanks for the reply,

Using the regshot method seems really dodgy, why is there no support for this kind of thing? what are people expected to do in a corporate/enterprise environment?

If I set all the security settings and copy the acrodata from that PC and copy it to another, the security settings copy over but the password does not. I really need this to be as non interuptive as possible, I can't be annoying our users and stopping them from working. That's why I need to do it via a GPO or some such way.

I really don't get that Adobe has no support for this, this seems like such a normal thing that everyone in an enterprise environment would do.

On another note, does the extension for Livecycle do anything like I described in my original post?

Thanks

[EnterpriseHelp]

The password answer: No. Document passwords are stored in the document. They must be created on a per document basis.

[SeriousErrorHasOccured]

There is no pre-defined gpo settings for any of the above.

Also I am sure admins in an enterprise settings don't take cynicism.

I've been through that documentation, this isn't the first time I am trying to accomplish this. However it seems awful that there is no way to set adobe printer preferences via a gpo, it also doesn't make sense that you cannot set security settings via gpo. There are other much cheaper pdf printer solutions that specialise in managing the pdf printer and adobe does not.

I do not believe that the password is only set in the document, otherwise how does the printer use the 'Use last known security settings' for it's secrutiy option?

[EnterpriseHelp]

You need to create your own GPO template. There is a starter template at the link I gave you above. It is totally possible to set all of your printing preferences via GPO--just create a template and do it. However, you should still look at the Wizard first because that's easier and may do exactly what you want.

Certainly some security preferences are stored in the registry and in acrodata files. However, it is also certain that the password itself is set in each individual document.

[SeriousErrorHasOccured]

I believe that is wrong, we pay a lot of money for the amount of licenses we have. Adobe should have this support already, we shouldn't need to waste time on these trivial things.

[EnterpriseHelp]

Support for what?

[SeriousErrorHasOccured]

Support for depoloyment and management of configuration settings redarding security. I don't know what you do all day (support people on forums?) but real world admins don't have the time for this. Very disapointed in Adobe and this has probably turned me off Adobe in the future.

There is really no reason why they don't offer the functionality. Really makes no sense why I need to capture registry keys and create my own GPOs.

[EnterpriseHelp]

• The Wizard provides an automated way to modify the security and print settings in the installer prior to deployment.
• Over 150 security settings are documented in the Preference Reference.
• The Application Security Guide describes all of the security settings.
• The Admin Guide and Wizard Guide describes how to create and deploy .joboptions files with print settings.
• There's a GPO starter template.
• If the default tools and doc don't provide what you need, creating custom GPO templates is relatively straightforward.
• Capturing reg keys manually is usually not required unless you're doing something odd.

HTH,

Ben

Forum Volunteer

[SeriousErrorHasOccured]

You're an Adobe staff correct?

Capturing reg keys manually is usually not required unless you're doing something odd.

This was your first suggestion.

Start with the ETK to learn about preferences generally: www.adobe.com/go/acrobatetk.

Then (since all those settings aren't documented), do the following:

Your above post is genralizing, you stated yourself that those options are not documented. I don't want general information, provide me links to the information I need, I stated very clearly what I would like to acheive and what my objective was. Don't tell me that all the settings I want are not documented and then tell me that they are.

[EnterpriseHelp]

Yes. But as a community forum, any staff here are not in Support, but rather folks who volunteer to help out.

In any case, your original question lumped a number of settings together: printing, security, password protection. It's not clear to me whether all the settings you need would be encapsulated in a .joboptions file. Certainly embedding passwords is not supported.

I have since pointed you to specific docs. Go to the link above, look at the Wizard guide, and read the printing options. If you have further specific questions and need help, feel free to post back.

hth,

Ben

[EnterpriseHelp]

Hi,

The regshot method is not dodgy at all. There are thousands of settings and not all are documented. Also, Distiller and the PDFPrinter are products in their own right. So the question is what's supported: Basically, changing most settings you have the right to change is supported, GPO is supported, etc. Another thing that's supported (I should have mentioned above) is to use the Customization Wizard and set your printing options there.

What admins do in an enterprise settings is read the Admin Guide, the Wizard Guide, and the Preference Reference (500+ documented prefs). Then if the setting is not documented, they do what I described above.

LiveCycle is a digital rights management solution. If you want to protect, control, and audit your docs, then use LC or another solution.

I'm looking into  the password question, but I'm 95% sure you can't do that as the mass deployment of passwords defeats their purpose. You might consider looking at certificate security methods.

Ben