Register-ScheduledTask -Xml ((Get-Content -Path '.\Secure-Host-Baseline\Adobe Reader\Adobe Reader 圆4 Update Task.xml') | Out-String) -TaskName 'Adobe Reader 圆4 Update Task'Īlternatively, the provided Install-AdobeUpdateTask command from the Adobe Reader PowerShell module can be used to install the task on a system. A (./Adobe Reader 圆4 Update Task.xml?raw=true) has been included in this repository which can be imported to a system using the Register-ScheduledTask command. Systems may rarely automatically update since the task can't successfully execute. Manually running the installed task named Adobe Acrobat Update Task will result in an error of The user account does not have permission to run this task. After a successful update check, another update check will not occur for 3 days even though the task runs at every user login. Managing updatesĪdobe Reader DC installs a task that executes an update check every time a user logs in. msp file to update an existing Adobe Reader install. You can also use the Get-AdobeReaderPatch -Version '2015.023.20053' command to download just the.
Adobe Reader DC version numbers that can be used with this script can be found on the Adobe Reader for Windows 10 page. Example: Get-AdobeReaderOfflineInstaller -Version '2015.023.20053'. You can use the Get-AdobeReaderOfflineInstaller command in the Adobe Reader PowerShell module in the scripts folder to download a specific version of Adobe Reader DC. The latest version (Version 2015.023.20053) can also be directly downloaded here.
Download Adobe Reader DCĪn offline installer for Adobe Reader DC can be downloaded from the Adobe Reader DC enterprise download site. audit file to check compliance with the settings implemented in the Group Policy Object. The Compliance folder contains a Nessus (aka ACAS in the DoD). Invoke-ApplySecureHostBaseline -Path '.\Secure-Host-Baseline' -PolicyNames 'Adobe Reader' -ToolPath '.\LGPO\lgpo.exe' Run the following command on a domain controller from a PowerShell prompt running as a domain administrator. Use the PowerShell Group Policy commands to import the Adobe Reader DC Group Policy into a domain. Importing the Adobe Reader DC Group Policy Importing the Adobe Reader DC domain Group Policy Copy the ReaderDC.admx file to %SystemRoot%\PolicyDefinitions\ and copy the ReaderDC.adml file to %SystemRoot%\PolicyDefinitions\en-us\ folder on the domain controller. %SystemRoot%\PolicyDefinitions\, typically C:\Windows\PolicyDefinitions\, contains Group Policy templates used by Local Group Policy on a standalone system. Updating the Adobe Reader DC Group Policy templates for a standalone system
If the domain administrators have not configured a Group Policy Central Store for the domain, then copy the ReaderDC.admx file to %SystemRoot%\PolicyDefinitions\, typically C:\Windows\PolicyDefinitions\, and copy the ReaderDC.adml file to %SystemRoot%\PolicyDefinitions\en-us\ folder on the domain controller. If the domain administrators have configured a Group Policy Central Store for the domain, then copy the ReaderDC.admx file to \\ Fully Qualified Domain Name\SYSVOL\ Fully Qualified Domain Name\Policies\PolicyDefinitions\ and copy the ReaderDC.adml file to \\ Fully Qualified Domain Name\SYSVOL\ Fully Qualified Domain Name\Policies\PolicyDefinitions\en-us\ Updating the Adobe Reader DC Group Policy templates for a domain The location to copy the files to varies depending on if it is a domain versus a standalone system. The Group Policy template files need to be copied to specific a location on the file system. Updating the Adobe Reader DC Group Policy templates Using the continuous track version of Adobe Reader DC (ARDC) is recommended. The settings implemented in the GPOs are from the NSA Information Assurance guidance paper Recommendations for Configuring Adobe Acrobat Reader DC in a Windows Environment.
Group Policy Objects for User and Computer policy and Group Policy template files are included in the SHB.