Anyone know how to disable javasscript in Acrobat? I know you can go into Preferences and uncheck "Enable Acrobat JavaScript" but I would like to lock it down or permanently disable it. Other than modify registry permissions?

Thanks
0 Comments   [ + ] Show Comments

Comments

Please log in to comment

Rating comments in this legacy AppDeploy message board thread won't reorder them,
so that the conversation will remain readable.

Answers

0
I don't know for sure, but my guess is that this is held in a registry setting so use a monitor (ProcMon, for example, is a real-time file, registry and process monitor) or snapshot before & after (I use In Control, a Ziff-Davis freeware utility for that).
Answered 07/11/2007 by: VBScab
Red Belt

Please log in to comment
0
Yes, unfortunately the registry key to disable JS in Acrobat is located at [HKEY_CURRENT_USER\Software\Adobe\Adobe Acrobat\8.0\JSPrefs]
"bEnableJS"=dword:00000000

This makes it harder to lock down and control since the user can go into preferences and enable it at anytime.

I don't understand why Adobe chose not to allow this setting to be locked down using the their tuner since this IS a security risk. Adobe cannot and will not make any guarantees that their 8.1 Acrobat products do not have any JS vulnerabilities. In fact there probably are some that are unknown at this time. I would rather not be one of the ones to find this out the hard way.
Answered 07/11/2007 by: joedown
Second Degree Brown Belt

Please log in to comment
0
Hi Joe,
the only promising way is IMHO, to use a custom GPO ADM template.
Here is one already up to date for version 8, but unfortunately only in german available:
http://www.gruppenrichtlinien.de/adm/Adobe.txt
And here are fragments, you could use for your own build up:
http://itninja.com/link/installshield-tuner-7.0-for-adobe-acrobat
Hope, this gives you some ideas.
Regards, Nick
Answered 07/12/2007 by: nheim
Tenth Degree Black Belt

Please log in to comment
Answer this question or Comment on this question for clarity