0 Replies Latest reply on Aug 4, 2010 10:58 PM by rebecca.menessec

    So, I'm trying to strip Reader for domain security

    rebecca.menessec

      ...and I thought I had it completely nailed.  I was able to view documents, print, change preferences, everything except the things I don't want people in my domain doing anyway, like executing JavaScript out of a PostScript document.  *ahem*

       

      Then I changed... something.  And now I get a brief error every time I try to open Edit -> Preferences:

       

      "Failed to load an application resource (internal error)."

       

      I've put back most of the plugins, restored .\Javascripts, reversed most of the Registry changes and cleared every folder called "Adobe" from my test user account, and I'm still getting this error when trying to open prefs.  Everything else works fine, like creating a report.  Although Reader reports that I'm running Vista when my test system is Win7 amd64 SP1 beta, but maybe I'm splitting hairs.

       

      Oh, also, tWhiteList doesn't seem to work like you'd expect it to.  In fact, it doesn't appear to work at all.  Does Reader even pay attention to this value any more?  Leaving it in because I'm still experimenting with it.  Also, the Reader MSI still installs it.  Presumably, it has a purpose of some kind.

       

      For no obvious reason, the list of plugins generated from Generate System Report just reports AcroForm several times.  About Plugins correctly shows

       

      • PPKLite.api
      • eBook.api
      • DigSig.api
      • AcroForm.api
      • PDDom.api
      • reflow.api
      • SaveAsRTF.api
      • Search.api

       

      I'm pasting the Registry entries directly from the Inno Setup script I'm working on (no one scream, please):

       

      Root: HKCU; SubKey: Software\Adobe\Acrobat Reader\9.0\AdobeViewer; ValueType: dword; ValueName: Launched; ValueData: $00000001
      Root: HKCU; SubKey: Software\Adobe\Acrobat Reader\9.0\AdobeViewer; ValueType: dword; ValueName: EULA; ValueData: $00000001
      Root: HKCU; SubKey: Software\Adobe\Acrobat Reader\9.0\AdobeViewer; ValueType: dword; ValueName: TrustedMode; ValueData: $00000000
      Root: HKCU; SubKey: Software\Adobe\Acrobat Reader\9.0\AVGeneral; ValueType: dword; ValueName: bLastExitNormal; ValueData: $00000001
      Root: HKCU; SubKey: Software\Adobe\Acrobat Reader\9.0\AVGeneral; ValueType: dword; ValueName: bAppInitialized; ValueData: $00000001
      Root: HKCU; SubKey: Software\Adobe\Acrobat Reader\9.0\AVTracker; ValueType: dword; ValueName: bLoadOnStart; ValueData: $00000000
      Root: HKCU; SubKey: Software\Adobe\Acrobat Reader\9.0\FormsPrefs; ValueType: dword; ValueName: bUserAskedToEnableAutoComplete; ValueData: $00000001
      Root: HKCU; SubKey: Software\Adobe\Acrobat Reader\9.0\Originals; ValueType: dword; ValueName: bDisplayedSplash; ValueData: $00000001
      Root: HKCU; SubKey: Software\Adobe\Acrobat Reader\9.0\Originals; ValueType: dword; ValueName: bBrowserIntegration; ValueData: $00000000
      Root: HKCU; SubKey: Software\Adobe\Acrobat Reader\9.0\SDI; ValueType: dword; ValueName: bMaximizeNextDocument; ValueData: $00000001
      Root: HKCU; SubKey: Software\Adobe\Acrobat Reader\9.0\SDI; ValueType: dword; ValueName: bNullDocMaximized; ValueData: $00000001
      Root: HKCU; SubKey: Software\Adobe\Acrobat Reader\9.0\Security\cDigSig; ValueType: dword; ValueName: bValidateOnOpen; ValueData: $00000001
      Root: HKCU; SubKey: Software\Adobe\Acrobat Reader\9.0\Security\cDigSig\cAdobeDownload; ValueType: dword; ValueName: bLoadSettingsFromURL; ValueData: $00000000
      Root: HKCU; SubKey: Software\Adobe\Acrobat Reader\9.0\Security\cDigSig\cAdobeDownload; ValueType: dword; ValueName: bAskBeforeInstalling; ValueData: $00000001
      Root: HKCU; SubKey: Software\Adobe\Acrobat Reader\9.0\Security\cHandlers; ValueType: dword; ValueName: bVerifyUseAlways; ValueData: $00000001
      Root: HKCU; SubKey: Software\Adobe\Acrobat Reader\9.0\Security\cPubSec; ValueType: dword; ValueName: iShowDocumentWarnings; ValueData: $00000001
      Root: HKCU; SubKey: Software\Adobe\Acrobat Reader\9.0\Selection; ValueType: string; ValueName: aDefaultSelect; ValueData: Select
      Root: HKCU; SubKey: Software\Adobe\Acrobat Reader\9.0\TrustManager; ValueType: dword; ValueName: bEnhancedSecurityInBrowser; ValueData: $00000001
      Root: HKCU; SubKey: Software\Adobe\Acrobat Reader\9.0\TrustManager; ValueType: dword; ValueName: bEnhancedSecurityStandalone; ValueData: $00000001
      Root: HKCU; SubKey: Software\Adobe\Acrobat Reader\9.0\UsageMeasurement; ValueType: dword; ValueName: bInstalledCleanupCheckDone; ValueData: $00000001
      Root: HKCU; SubKey: Software\Adobe\Acrobat Reader\9.0\Workflows; ValueType: dword; ValueName: bNeedSynchronizer; ValueData: $00000000
      Root: HKCU; SubKey: Software\Adobe\Acrobat Reader\9.0\Workflows; ValueType: dword; ValueName: bEnableRTCPart; ValueData: $00000000
      Root: HKCU; SubKey: Software\Adobe\Acrobat Reader\9.0\Workflows; ValueType: dword; ValueName: bEnableAcrobatHS; ValueData: $00000000
      Root: HKCU; SubKey: Software\Adobe\Acrobat Reader\9.0\Workflows; ValueType: dword; ValueName: bEnableWorkflowPart; ValueData: $00000000
      Root: HKCU; SubKey: Software\Adobe\Acrobat Reader\9.0\Workflows; ValueType: dword; ValueName: bEnableHSLibrary; ValueData: $00000000
      Root: HKCU; SubKey: Software\Adobe\Acrobat Reader\9.0\Workflows; ValueType: dword; ValueName: bEnableRTCAuth; ValueData: $00000000
      Root: HKCU; SubKey: Software\Adobe\Acrobat Reader\9.0\Workflows; ValueType: dword; ValueName: bEnableShareFile; ValueData: $00000000
      Root: HKCU; SubKey: Software\Adobe\Adobe Acrobat\9.0\DiskCabs; ValueType: dword; ValueName: bCollab_OfflineDocs; ValueData: $00000000
      Root: HKCU; SubKey: Software\Adobe\Adobe Acrobat\9.0\DiskCabs; ValueType: dword; ValueName: bCollab_Workflows; ValueData: $00000000
      Root: HKCU; SubKey: Software\Adobe\CommonFiles\Usage\Reader 9; ValueType: dword; ValueName: OptIn; ValueData: $00000000
      Root: HKCU; SubKey: Software\Adobe\CommonFiles\Usage\Reader 9; ValueType: dword; ValueName: throttle; ValueData: $00000003
      Root: HKLM; SubKey: Software\Policies\Adobe\Acrobat Reader\9.0\FeatureLockdown; ValueType: dword; ValueName: bUpdater; ValueData: $00000000
      Root: HKLM; SubKey: Software\Policies\Adobe\Acrobat Reader\9.0\FeatureLockdown; ValueType: dword; ValueName: bFedExInternetPrintingEnabled; ValueData: $00000000
      Root: HKLM; SubKey: Software\Policies\Adobe\Acrobat Reader\9.0\FeatureLockdown; ValueType: dword; ValueName: bCommercialPDF; ValueData: $00000001
      Root: HKLM; SubKey: Software\Policies\Adobe\Acrobat Reader\9.0\FeatureLockdown; ValueType: dword; ValueName: bEnhancedSecurityInBrowser; ValueData: $00000001
      Root: HKLM; SubKey: Software\Policies\Adobe\Acrobat Reader\9.0\FeatureLockdown; ValueType: dword; ValueName: iFileAttachmentPerms; ValueData: $00000001
      Root: HKLM; SubKey: Software\Policies\Adobe\Acrobat Reader\9.0\FeatureLockdown; ValueType: dword; ValueName: bCreateBuzzwordDoc; ValueData: $00000000
      Root: HKLM; SubKey: Software\Policies\Adobe\Acrobat Reader\9.0\FeatureLockdown; ValueType: dword; ValueName: bShowEbookMenu; ValueData: $00000000
      Root: HKLM; SubKey: Software\Policies\Adobe\Acrobat Reader\9.0\FeatureLockdown; ValueType: dword; ValueName: bPurchaseAcro; ValueData: $00000000
      Root: HKLM; SubKey: Software\Policies\Adobe\Acrobat Reader\9.0\FeatureLockdown; ValueType: dword; ValueName: bUsageMeasurement; ValueData: $00000000
      Root: HKLM; SubKey: Software\Policies\Adobe\Acrobat Reader\9.0\FeatureLockdown; ValueType: dword; ValueName: bDisableTrustedSites; ValueData: $00000001
      Root: HKLM; SubKey: Software\Policies\Adobe\Acrobat Reader\9.0\FeatureLockdown; ValueType: dword; ValueName: bEnhancedSecurityStandalone; ValueData: $00000001
      Root: HKLM; SubKey: Software\Policies\Adobe\Acrobat Reader\9.0\FeatureLockdown; ValueType: dword; ValueName: bCreatePDFOnline; ValueData: $00000000
      Root: HKLM; SubKey: Software\Policies\Adobe\Acrobat Reader\9.0\FeatureLockdown; ValueType: dword; ValueName: bBrowserIntegration; ValueData: $00000000
      Root: HKLM; SubKey: Software\Policies\Adobe\Acrobat Reader\9.0\FeatureLockdown; ValueType: dword; ValueName: bDisableTrustedFolders; ValueData: $00000001
      Root: HKLM; SubKey: Software\Policies\Adobe\Acrobat Reader\9.0\FeatureLockdown; ValueType: dword; ValueName: bAutoFill; ValueData: $00000000
      Root: HKLM; SubKey: Software\Policies\Adobe\Acrobat Reader\9.0\FeatureLockdown\cDefaultExecMenuItems; ValueType: string; ValueName: tWhiteList; ValueData: Close|Quit|FirstPage|PrevPage|NextPage|LastPage|ActualSize|FitPage|FitWidth|FitHeight|Sin glePage|OneColumn|TwoPages|TwoColumns|ZoomViewIn|ZoomViewOut|ShowHideBookmarks|ShowHideThu mbnails|Print|GoToPage|ZoomTo|GeneralPrefs|SaveAs|FullScreen|OpenOrganizer|Scan|PageSetup| Find|FindSearch|GoBack|GoForward|FitVisible|ShowHideToolbarEditing|ShowHideToolbarCommenti ng|ShowHideToolbarEdit|ShowHideToolbarFile|ShowHideToolbarFind|ShowHideToolbarForms|ShowHi deToolbarMeasuring|ShowHideToolbarData|ShowHideToolbarPageDisplay|ShowHideToolbarNavigatio n|ShowHideToolbarPrintProduction|ShowHideToolbarRedaction|ShowHideToolbarBasicTools|ShowHi deToolbarTasks|ShowHideToolbarTypewriter|PropertyToolbar|ShowHideArticles|ShowHideFileAtta chment|ShowHideAnnotManager|ShowHideFields|ShowHideOptCont|ShowHideModelTree|ShowHideSigna tures|InsertPages|ExtractPages|ReplacePages|DeletePages|CropPages|RotatePages|AddFileAttac hment|FindCurrentBookmark|BookmarkShowLocation|GoBackDoc|GoForward|DocHelpUserGuide|HelpRe ader|HandMenuItem|ZoomDragMenuItem|CollectionHome|CollectionDetails|CollectionPreview|Coll ectionShowRoot
      Root: HKLM; SubKey: Software\Policies\Adobe\Acrobat Reader\9.0\FeatureLockdown\cDefaultLaunchAttachmentPerms; ValueType: string; ValueName: tBuiltInPermList; ValueData: version:1|.7z:3|.ade:3|.adp:3|.app:3|.arc:3|.arj:3|.asp:3|.bas:3|.bat:3|.bz:3|.bz2:3|.cab :3|.chm:3|.class:3|.cmd:3|.com:3|.command:3|.cpl:3|.crt:3|.csh:3|.desktop:3|.dll:3|.exe:3| .fxp:3|.gz:3|.hex:3|.hlp:3|.hqx:3|.hta:3|.inf:3|.ini:3|.ins:3|.isp:3|.its:3|.job:3|.js:3|. jse:3|.ksh:3|.lnk:3|.lzh:3|.mad:3|.maf:3|.mag:3|.mam:3|.maq:3|.mar:3|.mas:3|.mat:3|.mau:3| .mav:3|.maw:3|.mda:3|.mdb:3|.mde:3|.mdt:3|.mdw:3|.mdz:3|.msc:3|.msi:3|.msp:3|.mst:3|.ocx:3 |.ops:3|.pcd:3|.pi:3|.pif:3|.prf:3|.prg:3|.pst:3|.rar:3|.reg:3|.scf:3|.scr:3|.sct:3|.sea:3 |.shb:3|.shs:3|.sit:3|.tar:3|.taz:3|.tbz:3|.tgz:3|.tmp:3|.url:3|.vb:3|.vbe:3|.vbs:3|.vsmac ros:3|.vss:3|.vst:3|.vsw:3|.webloc:3|.ws:3|.wsc:3|.wsf:3|.wsh:3|.z:3|.zip:3|.zlo:3|.zoo:3| .pdf:2|.fdf:2|.jar:3|.pkg:3|.tool:3|.term:3
      Root: HKLM; SubKey: Software\Policies\Adobe\Acrobat Reader\9.0\FeatureLockdown\cDefaultLaunchAttachmentPerms; ValueType: dword; ValueName: iUnlistedAttachmentTypePerm; ValueData: $00000000
      Root: HKLM; SubKey: Software\Policies\Adobe\Acrobat Reader\9.0\FeatureLockdown\cDefaultLaunchURLPerms; ValueType: string; ValueName: tSchemePerms; ValueData: version:1|shell:3|hcp:3|ms-help:3|ms-its:3|ms-itss:3|its:3|mk:3|mhtml:3|help:3|disk:3|afp :3|disks:3|telnet:3|ssh:3|acrobat:2|mailto:2|file:1|rlogin:3
      Root: HKLM; SubKey: Software\Policies\Adobe\Acrobat Reader\9.0\FeatureLockdown\cDefaultLaunchURLPerms; ValueType: string; ValueName: tSponsoredContentSchemeWhiteList; ValueData: notgopher
      Root: HKLM; SubKey: Software\Policies\Adobe\Acrobat Reader\9.0\FeatureLockdown\cDefaultLaunchURLPerms; ValueType: string; ValueName: tFlashContentSchemeWhiteList; ValueData: notgopher
      Root: HKLM; SubKey: Software\Policies\Adobe\Acrobat Reader\9.0\FeatureLockdown\cHostedServices\cProtectPDF; ValueType: dword; ValueName: bShowMeets; ValueData: $00000000
      Root: HKLM; SubKey: Software\Policies\Adobe\Acrobat Reader\9.0\FeatureLockdown\cSecurity\cDigSig; ValueType: dword; ValueName: bValidateOnOpen; ValueData: $00000001
      Root: HKLM; SubKey: Software\Policies\Adobe\Acrobat Reader\9.0\FeatureLockdown\cSecurity\cEDC; ValueType: dword; ValueName: bAllowAPSConfig; ValueData: $00000000
      Root: HKLM; SubKey: Software\Policies\Adobe\Acrobat Reader\9.0\FeatureLockdown\cSecurity\cHandlers; ValueType: dword; ValueName: bVerify; ValueData: $00000001