Enterprise Toolkit > Windows Registry Reference

FeatureLockdown (Lockable Settings)

Preferences under FeatureLockdown require administrator privileges to change, and admins set these preferences so that they are not subject to end user changes.

The settings on this page include most of those which do not have a similar setting in HKCU. For example, some settings in HKCU can also be set under FeatureLockdown (they may or may not have the same name). In these cases, the lockable counterpart is documented with the HKCU setting. Do not assume that because a preference is not documented here that it is not lockable. Choose the Lockable tab at the top of the page for a complete list.

For more information, refer to the Enterprise Administration Guide.


This preference category contains the following subfeature(s):

Disabling Misc. Features

The preferences here allow IT to disable and lock features such as access to Digital Editions, Acrobat.com, and external ads.

Summary table
bCommercialPDF Disables and locks a PDF's ability to display commercial ads.
bRegisterProduct For 9.x and earlier, disables UI items that allow users to register the product.
bShowAdsAllow Specifies whether ads can be dynamically added to a PDF.
bShowEbookMenu Disables and locks the Digital Editions menu item.
bWinCacheSessionHandles Specifies whether to retain cryptographic service provider (CSP) handles when a user authenticates to a digital ID.
Supported on WindowsSupported on MacSupported by AcrobatSupported by Adobe Reader
Data type boolean: DWORD value > REG_DWORD
Default null
Version # 9.0 and later
HKLM Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown
Summary Disables and locks the Digital Editions menu item.
Details Depending on the product version, the Digital Editions menu item is available on the Help or File menu. Possible values include:
  • 0: Don't show the Digital Editions menu item.
  • 1 (or null): Show the Digital Editions menu item.
GUI mapping File|Help > Digital Editions
Supported on WindowsSupported on MacSupported by AcrobatSupported by Adobe Reader
Data type boolean: DWORD value > REG_DWORD
Default null
Version # 8.0 and later
HKLM Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown
Summary Disables and locks a PDF's ability to display commercial ads.
Details Possible values include:
  • null: A null value is equal to 0 and allows ad display.
  • 1: Disable and lock a PDFs ability to display ads.
Supported on WindowsSupported on MacSupported by AcrobatSupported by Adobe Reader
Data type boolean: DWORD value > REG_DWORD
Default 1
Version # 8.1 and later
HKLM Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown\cSecurity\cPPKHandler
Summary Specifies whether to retain cryptographic service provider (CSP) handles when a user authenticates to a digital ID.
Details If true, a user does not have to re-authenticate to use the ID unless they log out or the session ends. The impact of this preference will vary based on the CSP in use; however, the setting does not affect the Windows CSPs.
Supported on WindowsSupported on MacSupported by AcrobatSupported by Adobe Reader
Data type boolean: DWORD value > REG_DWORD
Default null
Version # 6.0-9.x
HKLM Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown
Summary For 9.x and earlier, disables UI items that allow users to register the product.
Details Only exists in HKLM. While this feature is deprecated with 9.0, the Customization Wizard 9 and 10 provides a "Disable Registration" option for disabling the Register Product UI during the installation workflow. It is also possible to use the REGISTRATION_SUPPRESS property on the command line. This preference does not affect the Product Registration menu item under the Help menu. Possible values include:
  • 0: Show the product registration screen.
  • 1: Don't show the product registration screen.
GUI mapping Register Product screen
Supported on WindowsSupported on MacSupported by AcrobatSupported by Adobe Reader
Data type boolean: DWORD value > REG_DWORD
Default 1
Version # 6.0-9.0
HKLM Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown
Summary Specifies whether ads can be dynamically added to a PDF.
Details Possible values include:
  • null: Null = 0; Allow adding ads to a PDF.
  • 1: Disable and lock the ability to place ads in a PDF.

Network and Protocol Access

Contains preferences which provide permissions for accessing content via the specified protocols. Note that black and white lists may be regularly updated, so for the latest lists you should refer to the registry or plist settings in your installed product.

Summary table
cDefaultLaunchURLPerms A container for subkeys which provide permissions for access to content by protocol.
tFlashContentSchemeWhiteList A list of protocols Flash content can use to access external content.
tSchemePerms A list of protocols a PDF can use to access external content.
tSponsoredContentSchemeWhiteList A list of protocols sponsored content can use to access external content.
Security hardeningSupported on WindowsSupported on MacSupported by AcrobatSupported by Adobe Reader
Data type n/a: Cabs are keys that contain subvalues in the right hand registry panel.
Default See contained keys
Version # 8.0 and later
HKLM Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown
Summary A container for subkeys which provide permissions for access to content by protocol.
Security hardeningSupported on WindowsSupported on MacSupported by AcrobatSupported by Adobe Reader
Data type text: String value > REG_SZ
Default http|https|ftp|rtmp|rtmpe|rtmpt|rtmpte|rtmps|mailto
Version # 8.0 and later
HKLM Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown\cDefaultLaunchURLPerms
Summary A list of protocols Flash content can use to access external content.
Details Content is subject to other types of security restrictions.
Security hardeningSupported on WindowsSupported on MacSupported by AcrobatSupported by Adobe Reader
Data type text: String value > REG_SZ
Default version:1|shell:3|hcp:3|ms-help:3| ms-its:3|ms-itss:3|its:3| mk:3|mhtml:3|help:3|disk:3| afp:3|disks:3|telnet:3|ssh:3 |acrobat:2|mailto:2|file:1 |rlogin:3
Version # 8.0 and later
HKLM Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown\cDefaultLaunchURLPerms
Summary A list of protocols a PDF can use to access external content.
Details Content may be subject to other types of security restrictions as well. The list is updated periodically, so refer to the settings for you installed product.
Security hardeningSupported on WindowsSupported on MacSupported by AcrobatSupported by Adobe Reader
Data type text: String value > REG_SZ
Default http|https
Version # 8.0 and later
HKLM Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown\cDefaultLaunchURLPerms
Summary A list of protocols sponsored content can use to access external content.
Details TBD. Content is subject to other types of security restrictions.

Install On Demand

Summary table

PDF Ownership

When Reader X and Acrobat X are installed on the same machine or earlier versions of Acrobat already exist, you can choose which viewer is the default for PDF files. While Acrobat is the more capable, feature rich application, Reader X has a built in Protected Mode which is more secure (For security details, see the Application Security Guide).

This feature is a Adobe PDF handler-only feature: It does not enable switching to and from non-Adobe products and may or may not change the handling of other Acrobat supported formats; for example, it changes FDF and XDP, but not XFA or PDX.

Administrators interested in security may want to make Reader the default PDF viewer. Version X products will be able to switch between any product type and version back to 9.x.

For more information, see the PDF Ownership knowledge base article .

Summary table
bDisablePDFHandlerSwitching Disables the ability to change the specified default handler (PDF viewer).
Supported on WindowsSupported on MacSupported by AcrobatSupported by Adobe Reader
Data type boolean: DWORD value > REG_DWORD
Default See details.
Version # 10.0 and later
HKLM Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown
Summary Disables the ability to change the specified default handler (PDF viewer).
Details Note that UI configuration does not set any key in HKCU. Instead, changing the setting via the UI invokes the installer which sets the key in HKLM. The default application behavior varies depending on what is installed. A value of 1 disables the user's ability to change the default handler. Possible values include:
  • 0 (or null): Allow the user to change the default viewer.
  • 1: Don't allow the user to change the default viewer.
GUI mapping Edit > Preferences > General > Select Default PDF Handler

Online Features

These features require internet access and are sometime disabled in enterprise settings.

Summary table
bPurchaseAcro Disables the Help > Purchase Acrobat menu item in Adobe Reader.
Supported on WindowsSupported on MacSupported by AcrobatSupported by Adobe Reader
Data type boolean: DWORD value > REG_DWORD
Default null
Version # 8.0 and later
HKLM Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown
Summary Disables the Help > Purchase Acrobat menu item in Adobe Reader.
Details In an Adobe Reader installation, the Purchase Acrobat menu item is available on the Help menu. This key disables that option. Possible values include:
  • 0 (or null): Do remove the Purchase Acrobat menu item.
  • 1: Don't remove the Purchase Acrobat menu item.

Services (eSign-EchoSign)

These preferences provide options for remove and/or locking services in the product's user interface. Note that forms tools in Reader were moved to the Sign pane and the pane was renamed to Fill and Sign.

Summary table
bEnableEchoSignDetection Displays the Document Message Bar when a blank signature field is detected.
bEnableFillSig Specifies whether to remove the Sign Now panel from the Sign Pane.
bEnableSignPane Toggles whether the Sign Pane (11.0.08 and earlier) or the Fill and Sign Pane (11.0.09 and later) should appear the user interface
Supported on WindowsSupported on MacSupported by AcrobatSupported by Adobe Reader
Data type boolean: DWORD value > REG_DWORD
Default 1
Version # 11.0.03 only
HKLM Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown\cServices
Summary Displays the Document Message Bar when a blank signature field is detected.
Details This feature was disabled with 11.0.04. When enabled, the product tries to detect if a document may need to be signed. If the words "Sign" or "Signature" are detected next to any line, a document message bar appears with an "Open Sign Pane" button. Possible values include:
  • 0: Don't detect signature fields.
  • 1: Do detect signature fields.
Supported on WindowsSupported on MacSupported by AcrobatSupported by Adobe Reader
Data type boolean: DWORD value > REG_DWORD
Default 1
Version # 10.1.2 and later
HKLM Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown\cServices
Summary Toggles whether the Sign Pane (11.0.08 and earlier) or the Fill and Sign Pane (11.0.09 and later) should appear the user interface
Details Removing the task pane button removes access to the Sign pane which contains options for certificate signing and signing via EchoSign. Possible values include:
  • 0: Don't show the Sign Pane.
  • 1 or null: Show the Sign Pane.
Supported as follows:
  • 10.1.2: Reader only.
  • 11.0 and later: Reader and Acrobat.

11.0.09 changes: Prior to 11.0.09, it was not possible to remove the EchoSign options under the file menu or on the Welcome screen. These items are now removed with bEnableAcrobatHS = 0. Additionally, the Sign Pane has been renamed to Fill and Sign.

GUI mapping Sign toolbar item
Supported on WindowsSupported on MacSupported by Adobe Reader
Data type boolean: DWORD value > REG_DWORD
Default 1
Version # 10.1.2 < 11.0
HKLM Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown\cServices
Summary Specifies whether to remove the Sign Now panel from the Sign Pane.
Details The Sign Now panel provides a way to sign with a typed signature and a scanned image of your signature. This method does not require certificates or the use of an online service. Possible values include:
  • 0: Don't show the Sign Now panel.
  • 1 or null: Show the Sign Now panel.
GUI mapping Sign > Sign Now panel

Flash

Beginning with 9.5.1, Adobe Reader and Acrobat no longer include a Flash Player for displaying Flash in PDF files. Instead, rendering Flash content embedded in a PDF now requires that a Flash Player already resides on the user machine. This new strategy simplifies Acrobat and Reader deployments by reducing the number of future required updates should a security issue arise. Moreover, you can now manage and update Acrobat products and Flash individually.

If you open a PDF that requires Flash and Flash is not present on the machine, a dialog prompts you to download and install the latest Flash player. To pre-install Flash, go here:

Note: Flash de-coupling is not available in Safari for 9.5.1. Otherwise, Acrobat 9.x products require the Flash Player browser plug-in (Safari and Firefox) version 11.2 or higher. Flash Player 11.2 stopped supporting Windows 2000 and Mac OS lower than 10.6. Therefore, users need at least Windows XP and Mac OS 10.6.x to view Flash content in a PDF.

Summary table
bEnableFlash Specifies whether Flash content should be rendered in a PDF.
Security hardeningSupported on WindowsSupported on MacSupported by AcrobatSupported by Adobe Reader
Data type boolean: DWORD value > REG_DWORD
Default 0
Version # 9.5.1 and later
HKLM Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown
Summary Specifies whether Flash content should be rendered in a PDF.
Details Possible values include:
  • 0: Flash content is rendered as an empty, white box and does not play. A yellow message bar also appears at the top of the document stating that "Some features are disabled to avoid potential security risks."
  • 1: Flash plays if there is a system player present. If a player is not found, then the user is prompted to download the latest version.

Actions (online resources)

Specifies whether to show the menu item that opens the online Actions file library.

Summary table
bFindMoreWorkflowsOnline Specifies whether to show the menu item that opens the online Actions file library.
Supported on WindowsSupported on MacSupported by AcrobatSupported by Adobe Reader
Data type boolean: DWORD value > REG_DWORD
Default null
Version # 11.0+
HKLM Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown
Summary Specifies whether to show the menu item that opens the online Actions file library.
Details Possible values include:
  • 0: Disable the menu item.
  • 1 or null: Don't disable the menu item.
GUI mapping Tools > Action Wizard > Find More Online

Tool Sets (online resources)

Specifies whether to show the menu item that opens the online Actions file library.

Summary table
bFindMoreCustomizationsOnline Specifies whether to show the menu item that opens the online Acrobat Tool Set Exchange.
Supported on WindowsSupported on MacSupported by AcrobatSupported by Adobe Reader
Data type boolean: DWORD value > REG_DWORD
Default null
Version # 11.0+
HKLM Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown
Summary Specifies whether to show the menu item that opens the online Acrobat Tool Set Exchange.
Details Possible values include:
  • 0: Disable the menu item.
  • 1 or null: Don't disable the menu item.
GUI mapping Customizations > Find More Online

Services (Acrobat.com)

These preferences configure SharePoint and Office365 integration as well as online file storage. Macintosh support begins with 11.0.

Summary table
bDisableADCFileStore Disables storing files on Acrobat.com even when bEnableAcrobatHS = 1.
bDisableSharePointFeatures Disables the SharePoint and Office 365 integration features.
bEnableADCFileStore Enables the user interface items that allow storing files on Acrobat.com even when bEnableAcrobatHS = 0.
bEnableBHCache Toggles whether to cache files locally that are downloaded from Acrobat.com.
bShowDistAcrobatDotCom Specifies whether to allow Acrobat.com access from the Forms Central application.
Supported on WindowsSupported on MacSupported by AcrobatSupported by Adobe Reader
Data type boolean: DWORD value > REG_DWORD
Default 0
Version # 11.0+
HKLM Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown\cCloud
Summary Disables storing files on Acrobat.com even when bEnableAcrobatHS = 1.
Details This preference has significance only when bEnableAcrobatHS is 1 or is not present. It disables Acrobat.com files storage even when enterprises have enabled all Adobe's hosted services by setting bEnableAcrobatHS to 1. Possible values include:
  • 0: Allow file storage on Acrobat.com.
  • 1: Don't allow file storage on Acrobat.com.
Supported on WindowsSupported on MacSupported by AcrobatSupported by Adobe Reader
Data type boolean: DWORD value > REG_DWORD
Default 1
Version # 11.0+
HKLM Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown\cCloud
Summary Enables the user interface items that allow storing files on Acrobat.com even when bEnableAcrobatHS = 0.
Details This preferences turns on Acrobat.com access even when all other services are disabled. Possible values include:
  • 1: Do allow file storage on Acrobat.com.
Supported on WindowsSupported on MacSupported by AcrobatSupported by Adobe Reader
Data type boolean: DWORD value > REG_DWORD
Default null
Version # 10.1 and later
HKLM Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown\cSharePoint
Summary Disables the SharePoint and Office 365 integration features.
Details Controls the application's ability to detect that a file came from a Sharepoint server, disables the check-out prompt, and removes the SharePoint specific menu items. Possible values include:
  • 0: Same as "null." Don't disable SharePoint and Office 365 integration.
  • 1: Disable SharePoint and Office 365 integration.
Not modifiableSupported on WindowsSupported on MacSupported by AcrobatSupported by Adobe Reader
Data type boolean: DWORD value > REG_DWORD
Default null
Version # 11.0.09
HKLM Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown\cServices
Summary Toggles whether to cache files locally that are downloaded from Acrobat.com.
Details Possible values include:
  • 0 or null: Don't ache files that are downloaded from Acrobat.com.
  • 1: Cache files.
Supported on WindowsSupported on MacSupported by AcrobatSupported by Adobe Reader
Data type boolean: DWORD value > REG_DWORD
Default 1
Version #
HKCU Path FormsPrefs
HKLM Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown\FormsPrefs
Summary Specifies whether to allow Acrobat.com access from the Forms Central application.
Details It is also possible to use the DISABLE_FORMS_CENTRAL property at install time to prevent installation of the application. Possible values include:
  • 0 or null: Disable and lock Acrobat.com access.
  • 1: Enable and lock Acrobat.com access.

Services (SharePoint-Office365)

These preferences configure SharePoint and Office365 integration. Macintosh support begins with 11.0.

Summary table
bDisableSharePointFeatures Disables the SharePoint and Office 365 integration features.
Supported on WindowsSupported on MacSupported by AcrobatSupported by Adobe Reader
Data type boolean: DWORD value > REG_DWORD
Default null
Version # 10.1 and later
HKLM Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown\cSharePoint
Summary Disables the SharePoint and Office 365 integration features.
Details Controls the application's ability to detect that a file came from a Sharepoint server, disables the check-out prompt, and removes the SharePoint specific menu items. Possible values include:
  • 0: Same as "null." Don't disable SharePoint and Office 365 integration.
  • 1: Disable SharePoint and Office 365 integration.

Actions (shared folders)

11.0 introduces the ability for admins to configure shared action file directories.

Summary table
tDIPath Specifies a shared action file location.
tName Specifies a shared action file.
Supported on WindowsSupported on MacSupported by AcrobatSupported by Adobe Reader
Data type text: String value > REG_SZ
Default null
Version # 11.0+
HKLM Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown\cWorkflow\cBaseFolders\c(index)
Summary Specifies a shared action file.
Details Possible values include:
  • Any name.
Supported on WindowsSupported on MacSupported by AcrobatSupported by Adobe Reader
Data type text: String value > REG_SZ
Default null
Version # 11.0+
HKLM Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown\cWorkflow\cBaseFolders\c(index)
Summary Specifies a shared action file location.
Details Possible values include:
  • Any valid and shared file location.

Digital Signature Certification

These options provide additional methods for configuring trust for certified documents. See also TrustManager and Security > Signing.

Summary table
bEnablePVCertificateBasedTrust Specifies whether a document's certification status should appear in the Protected View's DMB
Supported on WindowsSupported by AcrobatSupported by Adobe Reader
Data type boolean: DWORD value > REG_DWORD
Default 0
Version # 11.0.04 and later
HKLM Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown
Summary Specifies whether a document's certification status should appear in the Protected View's DMB
Details Possible values include:
  • 0: Don't show the document's certfication status.
  • 1: Do show the document's certfication status.