Client Management Suite

These scripts are for Adobe Reader 9 and Adobe Acrobat 8, and are to provide a basis to apply to your own environment and versions.

The vulnerability information was released by Adobe, however a fix will not be pushed for V9 until March 11th. So until then they recommend turning off Javascript and Browser Integration. Below is the Vendor Link:

http://www.adobe.com/support/security/advisories/apsa09-01.html

So this VBSCRIPT applies the settings remotely in the Registry.

Keep in mind this code can also be used as a template script for any Registry setting that needs to be changed on all Local Users Subkeys.

In Task Server Create a new task.

Select Script Task, then select VBSCRIPT and Make sure under Advanced to select Hidden.

Now for the code, this is for Adobe Reader 9:

<---CODE BELOW THIS LINE -->

const HKEY_USERS = &H80000003
strComputer = "."

Set objReg=GetObject("winmgmts:{impersonationLevel=impersonate}!\\" _
  & strComputer & "\root\default:StdRegProv")

strKeyPath = ""
objReg.EnumKey HKEY_USERS, strKeyPath, arrSubKeys

For Each subkey In arrSubKeys
    objReg.CreateKey HKEY_USERS,subkey & "\Software\Adobe\Acrobat Reader\9.0\JSPrefs"
    objReg.SetDWORDValue HKEY_USERS, subkey & "\Software\Adobe\Acrobat Reader\9.0\JSPrefs", "bConsoleOpen", 0
    objReg.SetDWORDValue HKEY_USERS, subkey & "\Software\Adobe\Acrobat Reader\9.0\JSPrefs", "bEnableGlobalSecurity", 1
    objReg.SetDWORDValue HKEY_USERS, subkey & "\Software\Adobe\Acrobat Reader\9.0\JSPrefs", "bEnableJS", 0
    objReg.SetDWORDValue HKEY_USERS, subkey & "\Software\Adobe\Acrobat Reader\9.0\JSPrefs", "bEnableMenuItems", 0
    objReg.SetDWORDValue HKEY_USERS, subkey & "\Software\Adobe\Acrobat Reader\9.0\Originals", "bBrowserIntegration", 0
Next

<---END OF CODE-->

For Adobe Acrobat 8

<---CODE BELOW THIS LINE -->

const HKEY_USERS = &H80000003
strComputer = "."

Set objReg=GetObject("winmgmts:{impersonationLevel=impersonate}!\\" _
  & strComputer & "\root\default:StdRegProv")

strKeyPath = ""
objReg.EnumKey HKEY_USERS, strKeyPath, arrSubKeys

For Each subkey In arrSubKeys
    objReg.CreateKey HKEY_USERS,subkey & "\Software\Adobe\Adobe Acrobat\8.0\JSPrefs"
    objReg.SetDWORDValue HKEY_USERS, subkey & "\Software\Adobe\Adobe Acrobat\8.0\JSPrefs", "bChooseDialog", 1
    objReg.SetDWORDValue HKEY_USERS, subkey & "\Software\Adobe\Adobe Acrobat\8.0\JSPrefs", "bConsoleInput", 0
    objReg.SetDWORDValue HKEY_USERS, subkey & "\Software\Adobe\Adobe Acrobat\8.0\JSPrefs", "bConsoleOpen", 0
    objReg.SetDWORDValue HKEY_USERS, subkey & "\Software\Adobe\Adobe Acrobat\8.0\JSPrefs", "bEnableDebugger", 0
    objReg.SetDWORDValue HKEY_USERS, subkey & "\Software\Adobe\Adobe Acrobat\8.0\JSPrefs", "bEnableGlobalSecurity", 1
    objReg.SetDWORDValue HKEY_USERS, subkey & "\Software\Adobe\Adobe Acrobat\8.0\JSPrefs", "bEnableJS", 0
    objReg.SetDWORDValue HKEY_USERS, subkey & "\Software\Adobe\Adobe Acrobat\8.0\JSPrefs", "bEnableMenuItems", 0
    objReg.SetDWORDValue HKEY_USERS, subkey & "\Software\Adobe\Adobe Acrobat\8.0\JSPrefs", "iExceptions", 0
    objReg.SetDWORDValue HKEY_USERS, subkey & "\Software\Adobe\Adobe Acrobat\8.0\JSPrefs", "bSaveBreakpoints", 0
    objReg.SetDWORDValue HKEY_USERS, subkey & "\Software\Adobe\Adobe Acrobat\8.0\Originals", "bBrowserIntegration", 0
Next

<---END OF CODE-->

As an option "Command" Script, you can push through TS, you can apply this to everyone's machine, this forces a user to select Open or Save when clicking a PDF link. Security company's recommend this, as default is to automatically download or open the file.

<---COMMAND BELOW THIS LINE-->

reg add "HKEY_CLASSES_ROOT\AcroExch.Document.7" /v EditFlags /t reg_binary /d 00000000 /f

<---END OF COMMAND-->

Hope this workaround and template proves useful to others.