Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Detection Rules for Acrobat Standard vs Acrobat Pro

Created: 25 Mar 2011 | 2 comments

I am wondering what detection rules people are using to ID Acrobat Standard vs Acrobat Pro. I am currently using the MSI code but I don't think this is going to work well after the application is patched. I currently see Adobe Reader changes it's MSI code for each update. Since patch managment now updates Reader I was running into problems of Reader trying to re-install again. I have sence change Reader to us the INV dectection rule that uses Registry Key/File Path to File Version matches. However the INV rule for Acrobat would be the same for both Standard and Pro. 

Comments 2 CommentsJump to latest comment

jlawson's picture

Here is my detection rules for adobe reader but could you tell me where the msi code that Altiris checks is stored for a package?

 I would just change the below registry paths to "Adobe Acrobat"  and look for something in the registry to add that indicates if it is Pro vs Standard.

We don't use Acrobat so I can't assist you but hopefully you can use what I have here to help find a solution.  I'm sure somewhere it exist if it is pro or standard version.

Adobe:

Three entries

1.

registry key/file path-

registry key path:  HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Acrobat Reader\10.0\Installer

registry entry: Path

File Path: \Reader\AcroRd32.exe

Version must be: >=  10.0.0.0

2.

registry key/file path-

registry key path:  HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Acrobat Reader\10.0\Installer

registry entry: Path

File Path: \Reader\AcroRd32.exe

Version must be: <  11.0.0.0

3.

registry key Value-

registry key path:  HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Acrobat Reader\10.0\Language

registry entry: UI

registry value: ENU

Match: Entire String

DavidAJLockwood's picture

NoodleNT - sorry i don't have the answer to your adobe question however to answer jlawson's followup regarding where the MSI code is stored ...

The MSI code that is extracted when you import a piece of software is the MSI ProductCode (http://msdn.microsoft.com/en-us/library/aa370854(v=vs.85).aspx) . You can see that in the registry under the key that lists all Add/Remove programs information - HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall.

You can also view the ProductCode by opening the MSI with Wise or the free MS tool Orca and looking at it in the Property table.