Home / server / Questions / 17036
Accepted
Boden
Asked: 2009-06-02 09:58:33 +0800 CST

Managing applications like Acrobat Reader and Flash player via Windows GPO?

  • 772

Without using additional software, how are people managing software like Acrobat Reader and Flash Player in a Windows domain? I can deploy these applications via GPO software installation. Am I looking at creating my own .msi packages and updating my policies manually for every update?

I can certainly get started and have something working pretty quickly, but I want to see if anyone has any advice that might be helpful first.

windows group-policy adobe

3 Answers

  1. Best Answer

    To speak to Flash Player in particular: You can obtain an MSI from Adobe through a licensing program. Have a look at: http://www.adobe.com/products/players/fpsh_distribution1.html

    I regularly install Adobe Reader, Flash, Apple QuickTime, and others using GPO-based installations. When new versions are released, I deploy the new versions as mandatory upgrades.

    You should take some time to learn about Windows Installer and building your own packages. You can use repackaging tools, but the best results, in my expereience, come from learning how to use tools like WiX (http://wix.sourceforge.net/) to create your own packages from the ground up. Repackaging tools create "dumb" MSIs that don't necessarily do what the original SETUP author wanted. An intelligent human repackager tries to learn what the SETUP author wanted to do and creates a package that does that.

    At the very least, you need a tool like ORCA allow you to create Transform files (MST) for existing packages, and enough of an understanding of Windows Installer to allow you to intelligently create MST files.

    I've had really good luck with managing software this way. It's been a big win with my Customers for efficiency, and has been a great differentiator of my services. I highly recommend it.

    • 6

  2. I have created an GPO to manage the settings in Adobe Flash Player. Settings like auto update, if users are allowed to upload/download files using flash, if flash can read local files etc.

    The settings are defined in the Adobe Flash Administrators guide available here:

    http://www.adobe.com/devnet/flashplayer/articles/flash_player_admin_guide.html

    The settings is stored in a file called mms.cfg under either %windir%\system32\macromed\flash or %windir%\syswow64\macromed\flash depending if you are running a 32bit or 64bit client.

    Instead of everybody having to re-invent the wheel, I have placed the GPO for download here:

    https://www.itscforum.dk/showthread.php?72-Windows-Group-Policy-to-control-Adobe-Flash-Player-settings

    • 1

  3. Not only can you use GPOs to install like Flash and Acrobat Reader, there is an application out there called PolicyPak, a group policy based desktop management system that allows you to create GPOs and deliver settings to any Windows application, and ensures that those settings are locked down using GPOs. It works with Flash and Acrobat Reader. Here are a couple of links that shows how PolicyPak manages these two applications.

    Yes, this is a commercial solution but the company offers two ways to try out the application for free called community mode and trial mode.

    I do disclose that I do work for the company that creates PolicyPak.

    • 0