Disable third party automatic updaters (Java, Adobe) via a GPO
I need to disable the automatic updates on 100 computers via a GPO. I have searched and searched but not found a real solution. I found this:
http://kb2.adobe.com/cps/408/kb408711.html
But that pertains to the older versions, and as you know we are on 9.3.3 now for adobe reader.
I need to disable the automatic updates for Adobe flash player, Adobe reader, Acrobat, and Java, and any other adobe or java products there may be. For one reason, java tends to break things and I like to test it out before pushing the update to everyone.
With automatic, people click them and end up with problems. Also, the updates often do not work like the latest version of adobe I have had a bunch of complaints that they would click update and it would not install, they get errors.
Anyways, there has to be a way to disable these through a gpo. Anyone?
July 6th, 2010 2:55pm
Each application would require a unique setting. You could create your own custom GPO, that only has that one setting for each application.
However, most admins will configure entire applications, not just one setting. For example you can user the GPO from here to configure manay aspects of Adobe Reader and Actobat 9.0...including disable of the update.
http://forums.adobe.com/thread/392489
http://turboninjas.com/A9adm/AdobeAcrobat&Reader9.adm
The first setting is the update setting.
Free Windows Admin Tool Kit Click here and download it now
July 6th, 2010 4:53pm
That is an awesome adm template thanks to that guy! I have a gpo that pushes Adobe updates monthly using an install package. Can I just apply the "disable adobe updater 6" settings in the same gpo even though it sounds conflicting?
How about java?
July 7th, 2010 9:16am
>>>Can I just apply the "disable adobe updater 6" settings in the same gpo even though it sounds conflicting?
Test and find out.
>>>How about java?
Use google and search for existing GPO's for Java or registry settings that disable updates, or use process monitor to find the setting your self. You need to do a little research and testing.
Free Windows Admin Tool Kit Click here and download it now
July 7th, 2010 11:04am
I found the settings, the reg setting to turn off Java auto update are:
[HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Update\Policy]
"EnableJavaUpdate"=dword:00000000
"EnableAutoUpdateCheck"=dword:00000000
And I have been trying to make an .adm template so I can push the reg changes to all the workstations. I have created the following, based off of the adobe .adm template. Can someone tell me what I am doing wrong? The folder is showing up in GPOE, but there
are no options showing up.
CLASS MACHINE
CATEGORY !!Java
POLICY !!Checkforupdatesatstart
KEYNAME "SOFTWARE\JavaSoft\Java Update\Policy"
EXPLAIN !!Checkforupdatesatstart_Help
VALUENAME "EnableAutoUpdateCheck"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
POLICY !!EnableJavaUpdater
KEYNAME "SOFTWARE\JavaSoft\Java Update\Policy"
EXPLAIN !!EnableJavaUpdater_Help
VALUENAME "EnableJavaUpdate"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
END CATEGORY
[strings]
Java="Java Template, by RK"
EnableJavaUpdater="Enable Java Updater"
EnableJavaUpdater_Help="When set to Enabled, Java Updater can run and the 'Check for updates' option appears on the Help menu. When set to Disabled, Java Updater cannot run and the 'Check for updates' option does not appear on the Help menu."
Checkforupdatesatstart="Check for updates at start (non-policy)"
Checkforupdatesatstart_Help=""When set to Enabled Java will check for updates at startup. When set to Disabled Java will not check for updates at startup."
July 8th, 2010 9:28am
You need to disable "Only show policy settings that can be fully managed" to view these settings in the Group Policy Editor.
Seeing ADM Templates Section here
http://technet.microsoft.com/en-us/magazine/2008.01.layout.aspx
Free Windows Admin Tool Kit Click here and download it now
July 8th, 2010 9:35am
Ok, I have created the .adm template just to simply enable or disable Java auto Updater via a GPO. For all future searches,
here is how to disable / enable Java and Adobe Auto Updates on a group of computers via a GPO. Just copy all of the text in between the lines, paste the text into notepad, and save the file as a JavaAutoUpdater.adm, and AdobeAutoUpdater.adm, then
you can go into your GPMC and right click administrative templates (under computer), click add templates, and browse to the two .adm files you just saved (one for java, one for Adobe) and import them. You will also need to click on administrative templates,
then click view, click filtering, and uncheck the "only show policy settings that can be fully managed".
(Note: The Adobe template was created by Rick Patterson and is far more in depth than the java one and can be downloaded from the link provided below, I just wanted to provide the text because I know many people are still leary of downloading unknown
files)
JAVA
-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
CLASS MACHINE
CATEGORY !!Java
POLICY !!Checkforupdatesatstart
KEYNAME "SOFTWARE\JavaSoft\Java Update\Policy"
EXPLAIN !!Checkforupdatesatstart_Help
VALUENAME "EnableAutoUpdateCheck"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
POLICY !!EnableJavaUpdater
KEYNAME "SOFTWARE\JavaSoft\Java Update\Policy"
EXPLAIN !!EnableJavaUpdater_Help
VALUENAME "EnableJavaUpdate"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
END CATEGORY
[strings]
Java="Ross' Java Template"
EnableJavaUpdater="Enable Java Updater"
EnableJavaUpdater_Help="When set to Enabled, Java Updater can run and the 'Check for updates' option appears on the Help menu. When set to Disabled, Java Updater cannot run and the 'Check for updates' option does not appear on the Help menu."
Checkforupdatesatstart="Check for updates at start (non-policy)"
Checkforupdatesatstart_Help=""When set to Enabled Java will check for updates at startup. When set to Disabled Java will not check for updates at startup."
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
ADOBE
template, created by Rick Patterson:
http://turboninjas.com/A9adm/AdobeAcrobat&Reader9.adm
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
CLASS MACHINE
CATEGORY !!Reader
POLICY !!Checkforupdatesatstart
KEYNAME "Software\Adobe\Acrobat Reader\9.0\AVGeneral"
EXPLAIN !!Checkforupdatesatstart_Help
VALUENAME "bCheckForUpdatesAtStartup"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
POLICY !!DonotdisplayEULA
KEYNAME "Software\Adobe\Acrobat Reader\9.0\AdobeViewer"
EXPLAIN !!DonotdisplayEULA_Help
VALUENAME "EULA"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
POLICY !!EnableAdobeUpdater
KEYNAME "SOFTWARE\Policies\Adobe\Acrobat Reader\9.0\FeatureLockdown"
EXPLAIN !!EnableAdobeUpdater_Help
VALUENAME "bUpdater"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
POLICY !!EnablePurchaseAdobeAcrobat
KEYNAME "SOFTWARE\Policies\Adobe\Acrobat Reader\9.0\FeatureLockdown"
EXPLAIN !!EnablePurchaseAdobeAcrobat_Help
VALUENAME "bPurchaseAcro"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
POLICY !!EnableDigitalEditions
KEYNAME "SOFTWARE\Policies\Adobe\Acrobat Reader\9.0\FeatureLockdown"
EXPLAIN !!EnableDigitalEditions_Help
VALUENAME "bShowEbookMenu"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
POLICY !!EnableProductImprovementProgram
KEYNAME "SOFTWARE\Policies\Adobe\Acrobat Reader\9.0\FeatureLockdown"
EXPLAIN !!EnableProductImprovementProgram_Help
VALUENAME "bUsageMeasurement"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
POLICY !!EnableCreateBuzzwordDocument
KEYNAME "SOFTWARE\Policies\Adobe\Acrobat Reader\9.0\FeatureLockdown"
EXPLAIN !!EnableCreateBuzzwordDocument_Help
VALUENAME "bCreateBuzzwordDoc"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
POLICY !!EnableCreateAdobePDFUsingAcrobatcom
KEYNAME "SOFTWARE\Policies\Adobe\Acrobat Reader\9.0\FeatureLockdown"
EXPLAIN !!EnableCreateAdobePDFUsingAcrobatcom_Help
VALUENAME "bCreatePDFOnline"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
POLICY !!EnforceDisplayPDFinBrowser
KEYNAME "SOFTWARE\Policies\Adobe\Acrobat Reader\9.0\FeatureLockdown"
EXPLAIN !!EnforceDisplayPDFinBrowser_Help
VALUENAME "bBrowserIntegration"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
POLICY !!EnableDocumentMessageBar
KEYNAME "SOFTWARE\Policies\Adobe\Acrobat Reader\9.0\FeatureLockdown\cDocumentStatus"
EXPLAIN !!EnableDocumentMessageBar_Help
VALUENAME "bSuppressMessageBar"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
END CATEGORY
CATEGORY !!Acrobat
POLICY !!EnableAdobeUpdater
KEYNAME "SOFTWARE\Policies\Adobe\Adobe Acrobat\9.0\FeatureLockdown"
EXPLAIN !!EnableAdobeUpdater_Help
VALUENAME "bUpdater"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
POLICY !!EnablePurchaseAdobeAcrobat
KEYNAME "SOFTWARE\Policies\Adobe\Adobe Acrobat\9.0\FeatureLockdown"
EXPLAIN !!EnablePurchaseAdobeAcrobat_Help
VALUENAME "bPurchaseAcro"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
POLICY !!EnableDigitalEditions
KEYNAME "SOFTWARE\Policies\Adobe\Adobe Acrobat\9.0\FeatureLockdown"
EXPLAIN !!EnableDigitalEditions_Help
VALUENAME "bShowEbookMenu"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
POLICY !!EnableProductImprovementProgram
KEYNAME "SOFTWARE\Policies\Adobe\Adobe Acrobat\9.0\FeatureLockdown"
EXPLAIN !!EnableProductImprovementProgram_Help
VALUENAME "bUsageMeasurement"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
POLICY !!EnableCreateBuzzwordDocument
KEYNAME "SOFTWARE\Policies\Adobe\Adobe Acrobat\9.0\FeatureLockdown"
EXPLAIN !!EnableCreateBuzzwordDocument_Help
VALUENAME "bCreateBuzzwordDoc"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
POLICY !!EnableCreateAdobePDFUsingAcrobatcom
KEYNAME "SOFTWARE\Policies\Adobe\Adobe Acrobat\9.0\FeatureLockdown"
EXPLAIN !!EnableCreateAdobePDFUsingAcrobatcom_Help
VALUENAME "bCreatePDFOnline"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
POLICY !!EnforceDisplayPDFinBrowser
KEYNAME "SOFTWARE\Policies\Adobe\Adobe Acrobat\9.0\FeatureLockdown"
EXPLAIN !!EnforceDisplayPDFinBrowser_Help
VALUENAME "bBrowserIntegration"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
POLICY !!EnableDocumentMessageBar
KEYNAME "SOFTWARE\Policies\Adobe\Adobe Acrobat\9.0\FeatureLockdown\cDocumentStatus"
EXPLAIN !!EnableDocumentMessageBar_Help
VALUENAME "bSuppressMessageBar"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
END CATEGORY
CLASS USER
CATEGORY !!Reader
POLICY !!EnableDisplayPDFinBrowser
KEYNAME "SOFTWARE\Adobe\Acrobat Reader\9.0\Originals"
EXPLAIN !!EnableDisplayPDFinBrowser_Help
VALUENAME "bBrowserIntegration"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
POLICY !!EnableAcrobatJavaScript
KEYNAME "SOFTWARE\Adobe\Acrobat Reader\9.0\JSPrefs"
EXPLAIN !!EnableAcrobatJavaScript_Help
VALUENAME "bEnableJS"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
END CATEGORY
CATEGORY !!Acrobat
POLICY !!EnableDisplayPDFinBrowser
KEYNAME "SOFTWARE\Adobe\Adobe Acrobat\9.0\Originals"
EXPLAIN !!EnableDisplayPDFinBrowser_Help
VALUENAME "bBrowserIntegration"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
POLICY !!EnableAcrobatJavaScript
KEYNAME "SOFTWARE\Adobe\Adobe Acrobat\9.0\JSPrefs"
EXPLAIN !!EnableAcrobatJavaScript_Help
VALUENAME "bEnableJS"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
END CATEGORY
[strings]
Reader="Adobe Reader 9.0"
Acrobat="Adobe Acrobat 9.0"
Checkforupdatesatstart="Check for updates at start (non-policy)"
Checkforupdatesatstart_Help=""When set to Enabled Acrobat Reader will check for updates at startup. When set to Disabled Acrobat Reader will not check for updates at startup."
DonotdisplayEULA="Do not display EULA (non-policy)"
DonotdisplayEULA_Help="When set to Enabled the EULA will be not displayed for the user to accept at first run. When set to Disabled the EULA will be displayed for the user to accept at first run."
EnableAdobeUpdater="Enable Adobe Updater 6"
EnableAdobeUpdater_Help="When set to Enabled, Adobe Updater can run and the 'Check for updates' option appears on the Help menu. When set to Disabled, Adobe Updater cannot run and the 'Check for updates' option does not appear on the Help menu."
EnablePurchaseAdobeAcrobat="Enable Purchase Adobe Acrobat"
EnablePurchaseAdobeAcrobat_Help="When set to Enabled, Purchase Adobe Acrobat option appears on the Help menu. When set to Disabled, Purchase Adobe Acrobat option does not appear on the Help menu."
EnableDigitalEditions="Enable Digital Editions"
EnableDigitalEditions_Help="When set to Enabled, Digital Editions option appears on the File menu. When set to Disabled, Digital Editions option does not appear on the File menu."
EnableProductImprovementProgram="Enable Product Improvement Program"
EnableProductImprovementProgram_Help="When set to Enabled, it allows the display of the Product Improvment Display dialog. When set to Disabled, it prevents the display of the Product Improvment Display dialog"
EnableCreateBuzzwordDocument="Enable Create Buzzword Document"
EnableCreateBuzzwordDocument_Help="When set to Enabled, Create Buzzword Document appears on the File - Collaborate menu. When set to Disabled, Create Buzzword Document does not appear on the File - Collaborate menu."
EnableCreateAdobePDFUsingAcrobatcom="Enable Create Adobe PDF Using Acrobat.com"
EnableCreateAdobePDFUsingAcrobatcom_Help="When set to Enabled, Create Adobe PDF Using Acrobat.com appears on the File menu. When set to Disabled, Create Adobe PDF Using Acrobat.com does not appear on the File menu."
EnforceDisplayPDFinBrowser="Enforce Display PDF in Browser"
EnforceDisplayPDFinBrowser_Help="When set to Enabled OR Disabled, the Display PDF in Browser setting is grayed out so that the user cannot change the setting. When set to not configured, the user can again change Display PDF in Browser setting.
See the Enable Display PDF in Browser (non-policy) setting to enable or disable In-Place Activation."
EnableDisplayPDFinBrowser="Enable Display PDF in Browser (non-policy)"
EnableDisplayPDFinBrowser_Help="When set to Enabled, Display PDF in Browser on the Internet tab is checked. Clicking any link to any PDF files on any web site causes the PDF file to open in IE. When set to Disabled, Display PDF in Browser on the
Internet tab is unchecked. Clicking any link to any PDF files on any web site causes the PDF file to open in Adobe Reader or Acrobat. The user can change the Display PDF in Browser setting."
EnableAcrobatJavaScript="Enable Acrobat JavaScript (non-policy)"
EnableAcrobatJavaScript_Help="When set to Enabled, Enable Acrobat JavaScript on the JavaScript tab is checked. Opening any PDF files that contain Javascript will allow that JavaScript to run automatically. When set to Disabled, Enable Acrobat JavaScript
on the JavaScript tab is unchecked. Opening any PDF files that contain Javascript will cause the user to be prompted that JavaScript has been disabled. The user can change the Enable Acrobat JavaScript setting on the JavaScript tab."
EnableDocumentMessageBar="Enable the Document Message Bar"
EnableDocumentMessageBar_Help="When set to Enabled, allows the Document Message Bar to display at the top of the Reader window. When set to Disabled, prevents the Document Message Bar from displaying at the top of the Reader window."
-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
July 8th, 2010 10:15am
Thanks alot gunner!
Free Windows Admin Tool Kit Click here and download it now
July 8th, 2010 10:23am
That's great,
How does it work with Reader X?
April 19th, 2011 1:50pm
If you change all instances of 9.0 to 10.0 it seems to work with Reader X.
Free Windows Admin Tool Kit Click here and download it now
May 24th, 2011 3:55pm
Thanks Gunner! That worked great and saved me a lot of time.
June 9th, 2011 12:18pm
Thanks a lot for this great tool !!!!
Free Windows Admin Tool Kit Click here and download it now
July 22nd, 2011 8:08am
More update disablers are needed, for both the machine and per-user.
I expect I will likely have to write an ADM of my own to handle these. Here are a few:
* Apple Software Updater (iTunes / Quicktime / Safari)
* Google Sketchup
* Mozilla firefox
* OpenOffice.org
* SMART Tech (Notebook / Tools)
September 13th, 2011 1:45pm
Just to let you know that at www.PolicyPak.com there are pre-configured Paks which can configure just about EVERY setting for Java, Acrobat, Google Sketchup, OpenOffice and more. Note: These are NOT ADM templates, because ADM templates cannot get to every
setting. But PolicyPak can (and uses Group Policy to deliver the settings.)
--Jeremy Moskowitz, Group Policy MVP
Free Windows Admin Tool Kit Click here and download it now
October 14th, 2011 10:25pm
We can disable adobe reader by registry key to and deploy by GPO whixh is pretty much simple and easy .
[HKEY_LOCAL_MACHINESOFTWAREPoliciesAdobeAcrobat Reader10.0FeatureLockDown]
bUpdater=dword:00000000
Cheers
for details
http://funewayzz.com/blog-2/disabling-adobe-reader-updates-regedit/
June 5th, 2012 10:18pm