Video Screencast Help
Symantec Secure Login will be live on Connect starting February 25. Get the details here.

Disable auto update in Adobe patches

Created: 14 Jan 2011 | 6 comments
reto.zuerrer's picture
8 Agree
0 Disagree
+8 8 Votes
Login to vote

It would be better when the auto update is disabled in the Adobe patches and that there is no desktop shortcut after patching.

Comments 6 CommentsJump to latest comment

powellbc's picture

Is this in then pipeline for SP1 of the 7.1 release of patch?

Login to vote
Michael Grueber's picture

No, this is not planned for 7.1 SP1.  Customers will continue to be responsible for any such customizations that they wish to make.  Such customizations can be made by creating an independent task that changes the relevant registry key value, removes desktop shortcuts, etc.

While I think that every customer would like to be able to turn off the auto update feature, I don't believe that the same is true with respect to removing the desktop shortcut.

Although it would obviously be preferable if the Adobe installations did not overwrite such settings, unfortunately that is not the case.

Login to vote
Pascal KOTTE's picture

Symantec can provide a set of Samples, we can use or import as a task/job, or better, a software manage policy: with the good registry checking already preconfigured, and the correction script, in case not (remediation). So when Adobe "re-activate" the auto-update, Altiris re-deactivate (can run hourly, low impact).

Oh yes... Not possible to import such a policy, because not possible to import a software component with detection rules & remediation program...

OK, Symantec should provide a white paper explaining how to do that, or a connect article. And also make the necessary for being able to import a software component, we can export one, never import.

~Pascal @ Do you speak French? Et utilisez Altiris: venez nous rejoindre sur le GUASF

Login to vote
Michael Grueber's picture

If someone has such a task/job, perhaps they can share it with the community rather than waiting for Symantec to provide a sample task/job.

Login to vote
burndtjammer's picture

flash: Read the flash player admin guide for 11.4 (or the version you're using.)  In it you can set settings in mms.cfg that you can push out to all machines using your preferred method.  On thing we recently changed was rather than not allowing updates, we created our own internal update server. In combination with our mms.cfg we no longer have to worry about post patch patching. 

Reader: Autoupdate features are turned off using an mst file.  This mst can be created using Adobe Customization wizard.  Otherwise youd have to manually set reg keys.

Shockwave: I've had no problems with it autopdating on its own.  Adobe must not include an AU service with this.

Java (not adobe but its the worst one for AU):  Set registry keys using a bat file and your preferred delivery method.

reg add "HKLM\SOFTWARE\JavaSoft\Java Update\Policy" /v EnableJavaUpdate /t REG_DWORD /d 0 /f >NUL 2>&1

reg add "HKLM\SOFTWARE\JavaSoft\Java Update\Policy" /v NotifyDownload /t REG_DWORD /d 0 /f >NUL 2>&1

 reg add "HKLM\SOFTWARE\JavaSoft\Java Runtime Environment\1.6.0_%jre6ver%\MSI" /V AUTOUPDATECHECK /t REG_DWORD /d 0 /F >NUL 2>&1

reg add "HKLM\SOFTWARE\JavaSoft\Java Runtime Environment\1.6.0_%jre6ver%\MSI" /V JAVAUPDATE /t REG_DWORD /d 0 /F >NUL 2>&1

reg add "HKLM\SOFTWARE\JavaSoft\Java Runtime Environment\1.6.0_%jre6ver%\MSI" /V JU /t REG_DWORD /d 0 /F >NUL 2>&1

reg add "HKLM\SOFTWARE\JavaSoft\Java Runtime Environment\1.6.0_%jre6ver%\MSI" /v IEXPLORER /t REG_DWORD /d 1 /F >NUL 2>&1

reg add "HKLM\SOFTWARE\JavaSoft\Java Runtime Environment\1.6.0_%jre6ver%\MSI" /v MOZILLA /t REG_DWORD /d 1 /F >NUL 2>&1

flash_player_11_4_admin_guide.pdf 427.18 KB
Login to vote
WDRAIN1's picture

Here is what I use to Disable Adobe Updates...

I include the following in a install script after the MSI install of the respective Adobe Install package...

Adober Reader XI 11.x

reg add "HKLM\Software\Policies\Adobe\Acrobat Reader\11.0\FeatureLockDown" /v bUpdater /d 0 /t REG_DWORD /f

Adobe Flash 14

::Windows x64
xcopy "%~dp0mms.cfg" "%windir%\sysWoW64\Macromed\Flash" /heyi
) else (
:: Windows x86
xcopy "%~dp0mms.cfg" "%windir%\System32\Macromed\Flash\" /heyi

---- contents of mms.cfg ---


Login to vote