13 Replies Latest reply on Jul 14, 2010 6:47 AM by mennorium83

    Check for Updates and User Account Control

    JohnBlanc

      With Adobe Reader the 'Check for Updates' function under Help does not appear to function when 'User Account Control (UAC)' in Windows Vista is turned on.

       

      When UAC is turned off, the 'Check for Updates' works, and if there an update is available for Adobe Reader, it will download and install.

       

      Other programs that update software funtion with UAC turned on, albeit with the additional dialog boxes that UAC brings, namely the CTL/ALT/DEL and user account logon (when applicable.)

       

      Without updating the Adobe Reader software, users are leaving themeselves open to vulnerabilities.  Without UAC turned on, users are also leaving themselves open to certain risks.  So there appears to be a dilemma presented.

       

      Does anyone know if/when Adobe will be changing the 'Check for Updates' functionality so it will behave more in-line with the UAC functionality?

       

      Thank you in advance for your time and attention.

        • 1. Re: Check for Updates and User Account Control
          ARM2705 Adobe Employee

          Could you please tell me what Reader version you are using? And from which (Standard user/Administrator user) you are trying to use the "Check for Updates" on Vista UAC On?

          • 2. Re: Check for Updates and User Account Control
            JohnBlanc Level 1

            Certainly.

             

            We are using Adobe Reader 9.3.2, logged on as the administrator, and using Windows Vista Enterprise Edition w/Service Pack 2.

             

            I have 5,000 + clients that I have to ensure security as well as providing updated software.

             

            I have disabled the User Account Control via GPO so my clients can update their Adobe Reader when they are away, especially when in foreign countries.

             

            john

            • 3. Re: Check for Updates and User Account Control
              ARM2705 Adobe Employee

              Let me tell you the "Check for updates" behavior on Vista/Win 7 with UAC On/Off with Adobe Reader 9

              1. With Administrator a/c + UAC On => "Check for updates" is enabled

              2. With Administrator a/c + UAC Off => "Check for updates" is enabled

              3. With Standard a/c + UAC On => "Check for updates" is enabled

              4. With Standard a/c + UAC Off => "Check for updates" is disabled

              5. With Guest a/c + UAC On => "Check for updates" is disabled

              6. With Guest a/c + UAC Off => "Check for updates" is disabled

               

              Please ensure that the above ("Check for updates" is enabled, 1,2 and 3) behaviors are matching on the client machines.

              • 4. Re: Check for Updates and User Account Control
                JohnBlanc Level 1

                I appreciate your quick response.

                 

                I just have a question to clarify your detailed reply.

                 

                Does "With Administrator a/c" equal "any a/c that is in the Administrators group" or is it equal to, "only the local built-in Windows Administrator account?"

                • 5. Re: Check for Updates and User Account Control
                  ARM2705 Adobe Employee

                  I meant, "With Administrator a/c" equal "any a/c that is in the Administrators group"

                  • 6. Re: Check for Updates and User Account Control
                    JohnBlanc Level 1

                    While what you are stating might be true, it is not the experience that we are encountering.

                     

                    All of our clients are placed in the local Administrators group on their individual computers, myself included, and 'Check for Updates' does not execute with UAC turned on.

                     

                    Is there a way that I can run the 'Check for Updates' that can show the interaction between the application and Vista such as running in debug mode?  Then I can capture the exact point of failure and maybe identify the setting(s) preventing 'Check for Updates' from working when UAC is enabled and an Administrator is logged on.  I know that UAC consistes of more than one setting in the Windows policy, and maybe I just have to find the right one to enable/disable.

                     

                    Again, I appreciate your responses and continued assistance.

                    • 7. Re: Check for Updates and User Account Control
                      JohnBlanc Level 1

                      Yes sir, understood.

                       

                       

                       

                      We are unable to run the 'Check for Updates' even as administrators when UAC is enabled.

                       

                       

                       

                      There are 5 or 6 settings in the local Windows policy that comprise UAC.  There might be on that we must enable/disable to get 'Check for Updates' to work.

                       

                       

                       

                      Is there a method that I can use to capture the interaction between the 'Check for Updates' and Windows Vista?  Something like running in debug mode?

                       

                       

                      john

                       

                       

                      John J. Blanc, Jr., CISSP, MCSE, Computer Specialist, Office of the Dean, USMA, West Point, New York 10996, 845-938-7218

                      • 8. Re: Check for Updates and User Account Control
                        LeoAdobeX Adobe Employee

                        Could you describe how it "does not work"?

                        Is it that menu is disabled? Is menu available at all?

                        If menu is enabled and you click on it, is anything launched?

                        • 9. Re: Check for Updates and User Account Control
                          JohnBlanc Level 1

                          With UAC enabled, I start Adobe Reader, click on Help, and there is no selection for updating.  There is nothing for me to click.  Additionally, in Edit, Preferences, Updater, "Do not download or install updates automatically" is selected, and everything on the right pane is greyed-out.

                           

                          With UAC disabled, I start Adobe Reader, click on Help, and there is a selection for 'Check for Updates.'  In Edit, Preferences, Updater, I can select the various methods of downloading/updating Adobe Reader.  The option to download the update but not install was selected, as I wanted it to be.

                           

                          Finally, I noticed that the notice from Adobe, 'Update is ready to install,' appears in the Windows tray.  And it is this point that somewhat changes the serverity of the problem, that is, while 'Check for Updates' is not available when UAC is enabled, it appears that Adobe can still be updated through the automatic download feature.  The only problem with this is that I cannot tell if the update was downloaded while UAC was enabled (probably not since the download setting says not to) or while UAC was disabled.

                           

                          In any case, it still does not appear that our clients can get their Adobe Reader software updated while UAC is enabled.  And this represents a security dilemma for us.

                          • 10. Re: Check for Updates and User Account Control
                            JohnBlanc Level 1

                            I have updated my Adobe Reader from version 9.3.2 to version 9.3.3.  Now, with UAC enabled, Check for Updates appears as a selection.

                             

                            When I click on Check for Updates, Adobe Update Reader reports as follows:

                              Update failed

                              Updates have been disabled by your system policy.

                              Error 1006

                             

                            It is probably true that there is a system policy in place that is preventing the update.  We have Department of Defense configuration settings and one of them may be preventing the update from occuring.  My question is, which one.  If I can identify the setting, with your help, then I will have the problem solved.

                            • 11. Re: Check for Updates and User Account Control
                              JohnBlanc Level 1

                              I have updated my Adobe Reader from version 9.3.2 to version 9.3.3.  Now, with UAC enabled, Check for Updates appears as a selection.

                               

                              When I click on Check for Updates, Adobe Update Reader reports as follows:

                               

                                Update failed

                               

                                Updates have been disabled by your system policy.

                               

                                Error 1006

                               

                              It is probably true that there is a system policy in place that is preventing the update.  We have Department of Defense configuration settings and one of them may be preventing the update from occuring.  My question is, which one.  If I can identify the setting, with your help, then I will have the problem solved.

                               

                               

                              john

                               

                               

                              John J. Blanc, Jr., CISSP, MCSE, Computer Specialist, Office of the Dean, USMA, West Point, New York 10996, 845-938-7218

                              • 13. Re: Check for Updates and User Account Control
                                mennorium83

                                M

                                ik krijg een melding dat er een update geinstalleerd kan worden voor adobe reader als ik op deze link klik krijg het scherm uitvoeren en begint de

                                installatie op het volgende scherm krijg ik de melding kan patchpakket niet openen neem contakt op met leverancier.

                                hoe los ik dit op?