Enterprise Toolkit ยป Windows Registry Reference
NextNext

FeatureLockdown (Lockable Settings)

Some lockable keys have a corollary in the user preferences area (e.g. HKCU) or at least a logical category in which to reside. Those keys are documented with their lockable counterpart. However, some keys only exist under FeatureLockdown, require administrator privileges to change, and cannot be logically grouped with other keys.

Beginning with 11.0, preferences that are lockable on Windows are also lockable on Macintosh.


This preference category contains the following subfeature(s):

Disabling Misc. Features

The preferences here allow IT to disable and lock features such as access to Digital Editions, Acrobat.com, and external ads.

Summary table
bCommercialPDF Disables and locks a PDFs ability to display commercial ads.
bRegisterProduct For 9.x and earlier, disables UI items that allow users to register the product.
bShowAdsAllow Specifies whether ads can be dynamically added to a PDF.
bShowEbookMenu Disables and locks the Digital Editions menu item.
bWinCacheSessionHandles Specifies whether to retain cryptographic service provider (CSP) handles when a user authenticates to a digital ID.
bShowEbookMenu
Supported on WindowsSupported on MacSupported by AcrobatSupported by Adobe Reader

Top>FeatureLockdown>Disabling Misc. Features>bShowEbookMenu
Data type boolean: DWORD value > REG_DWORD
Default null
Version # 9.0 and later
Lock Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown
Summary Disables and locks the Digital Editions menu item.
Details Depending on the product version, the Digital Editions menu item is available on the Help or File menu. Possible values include:
  • 0: Don't show the Digital Editions menu item.
  • 1 (or null): Show the Digital Editions menu item.
GUI mapping File|Help > Digital Editions
bCommercialPDF
Supported on WindowsSupported on MacSupported by AcrobatSupported by Adobe Reader

Top>FeatureLockdown>Disabling Misc. Features>bCommercialPDF
Data type boolean: DWORD value > REG_DWORD
Default null
Version # 8.0 and later
Lock Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown
Summary Disables and locks a PDFs ability to display commercial ads.
Details Possible values include:
  • null: A null value is equal to 0 and allows ad display.
  • 1: Disable and lock a PDFs ability to display ads.
bWinCacheSessionHandles
Supported on WindowsSupported on MacSupported by AcrobatSupported by Adobe Reader

Top>FeatureLockdown>Disabling Misc. Features>bWinCacheSessionHandles
Data type boolean: DWORD value > REG_DWORD
Default 1
Version # 8.1 and later
Lock Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown\cSecurity\cPPKHandler
Summary Specifies whether to retain cryptographic service provider (CSP) handles when a user authenticates to a digital ID.
Details If true, a user does not have to re-authenticate to use the ID unless they log out or the session ends. The impact of this preference will vary based on the CSP in use; however, the setting does not affect the Windows CSPs.
bRegisterProduct
Supported on WindowsSupported on MacSupported by AcrobatSupported by Adobe Reader

Top>FeatureLockdown>Disabling Misc. Features>bRegisterProduct
Data type boolean: DWORD value > REG_DWORD
Default null
Version # 6.0-9.x
Lock Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown
Summary For 9.x and earlier, disables UI items that allow users to register the product.
Details Only exists in HKLM. While this feature is deprecated with 9.0, the Customization Wizard 9 and 10 provides a "Disable Registration" option for disabling the Register Product UI during the installation workflow. It is also possible to use the REGISTRATION_SUPPRESS property on the command line. This preference does not affect the Product Registration menu item under the Help menu. Possible values include:
  • 0: Show the product registration screen.
  • 1: Don't show the product registration screen.
GUI mapping Register Product screen
bShowAdsAllow
Supported on WindowsSupported on MacSupported by AcrobatSupported by Adobe Reader

Top>FeatureLockdown>Disabling Misc. Features>bShowAdsAllow
Data type boolean: DWORD value > REG_DWORD
Default 1
Version # 6.0-9.0
Lock Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown
Summary Specifies whether ads can be dynamically added to a PDF.
Details Possible values include:
  • null: Null = 0; Allow adding ads to a PDF.
  • 1: Disable and lock the ability to place ads in a PDF.

Network and Protocol Access

Contains preferences which provide permissions for accessing content via the specified protocols.

Summary table
cDefaultLaunchURLPerms A container for subkeys which provide permissions for access to content by protocol.
tFlashContentSchemeWhiteList A list of protocols Flash content can use to access external content.
tSchemePerms A list of protocols a PDF can use to access external content.
tSponsoredContentSchemeWhiteList A list of protocols sponsored content can use to access external content.
cDefaultLaunchURLPerms
Security hardeningSupported on WindowsSupported on MacSupported by AcrobatSupported by Adobe Reader

Top>FeatureLockdown>Network and Protocol Access>cDefaultLaunchURLPerms
Data type n/a: Cabs are keys that contain subvalues in the right hand registry panel.
Default See contained keys
Version # 8.0 and later
Lock Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown
Summary A container for subkeys which provide permissions for access to content by protocol.
tFlashContentSchemeWhiteList
Security hardeningSupported on WindowsSupported on MacSupported by AcrobatSupported by Adobe Reader

Top>FeatureLockdown>Network and Protocol Access>tFlashContentSchemeWhiteList
Data type text: String value > REG_SZ
Default http|https|ftp|rtmp|rtmpe|rtmpt|rtmpte|rtmps|mailto
Version # 8.0 and later
Lock Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown\cDefaultLaunchURLPerms
Summary A list of protocols Flash content can use to access external content.
Details Content is subject to other types of security restrictions.
tSchemePerms
Security hardeningSupported on WindowsSupported on MacSupported by AcrobatSupported by Adobe Reader

Top>FeatureLockdown>Network and Protocol Access>tSchemePerms
Data type text: String value > REG_SZ
Default version:1|shell:3|hcp:3|ms-help:3| ms-its:3|ms-itss:3|its:3| mk:3|mhtml:3|help:3|disk:3| afp:3|disks:3|telnet:3|ssh:3 |acrobat:2|mailto:2|file:1 |rlogin:3
Version # 8.0 and later
Lock Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown\cDefaultLaunchURLPerms
Summary A list of protocols a PDF can use to access external content.
Details Content is subject to other types of security restrictions.
tSponsoredContentSchemeWhiteList
Security hardeningSupported on WindowsSupported on MacSupported by AcrobatSupported by Adobe Reader

Top>FeatureLockdown>Network and Protocol Access>tSponsoredContentSchemeWhiteList
Data type text: String value > REG_SZ
Default http|https
Version # 8.0 and later
Lock Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown\cDefaultLaunchURLPerms
Summary A list of protocols sponsored content can use to access external content.
Details TBD. Content is subject to other types of security restrictions.

Install On Demand

Summary table

PDF Ownership

When Reader X and Acrobat X are installed on the same machine or earlier versions of Acrobat already exist, you can choose which viewer is the default for PDF files. While Acrobat is the more capable, feature rich application, Reader X has a built in Protected Mode which is more secure (For security details, see the Application Security Guide).

This feature is a Adobe PDF handler-only feature: It does not enable switching to and from non-Adobe products and may or may not change the handling of other Acrobat supported formats; for example, it changes FDF and XDP, but not XFA or PDX.

Administrators interested in security may want to make Reader the default PDF viewer. Version X products will be able to switch between any product type and version back to 9.x.

For more information, see the PDF Ownership knowledge base article .

Summary table
bDisablePDFHandlerSwitching Disables the ability to change the specified default handler (PDF viewer).
bDisablePDFHandlerSwitching
Supported on WindowsSupported on MacSupported by AcrobatSupported by Adobe Reader

Top>FeatureLockdown>PDF Ownership>bDisablePDFHandlerSwitching
Data type boolean: DWORD value > REG_DWORD
Default See details.
Version # 10.0 and later
Lock Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown
Summary Disables the ability to change the specified default handler (PDF viewer).
Details Note that UI configuration does not set any key in HKCU. Instead, changing the setting via the UI invokes the installer which sets the key in HKLM. The default application behavior varies depending on what is installed. A value of 1 disables the user's ability to change the default handler. Possible values include:
  • 0 (or null): Allow the user to change the default viewer.
  • 1: Don't allow the user to change the default viewer.
GUI mapping Edit > Preferences > General > Select Default PDF Handler

Online Features

These features require internet access and are sometime disabled in enterprise settings.

Summary table
bPurchaseAcro Disables the Help > Purchase Acrobat menu item in Adobe Reader.
bPurchaseAcro
Supported on WindowsSupported on MacSupported by AcrobatSupported by Adobe Reader

Top>FeatureLockdown>Online Features>bPurchaseAcro
Data type boolean: DWORD value > REG_DWORD
Default null
Version # 8.0 and later
Lock Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown
Summary Disables the Help > Purchase Acrobat menu item in Adobe Reader.
Details In an Adobe Reader installation, the Purchase Acrobat menu item is available on the Help menu. This key disables that option. Possible values include:
  • 0 (or null): Do remove the Purchase Acrobat menu item.
  • 1: Don't remove the Purchase Acrobat menu item.

Signing with EchoSign

These preferences allow IT to remove signing options from the product's user interface.

Summary table
bEnableEchoSignDetection Displays the Document Message Bar when a blank signature field is detected.
bEnableFillSig Specifies whether to remove the Sign Now panel from the Sign Pane.
bEnableSignPane Specifies whether to remove the Sign task pane button from the toolbar.
bEnableEchoSignDetection
Supported on WindowsSupported on MacSupported by AcrobatSupported by Adobe Reader

Top>FeatureLockdown>Signing with EchoSign>bEnableEchoSignDetection
Data type boolean: DWORD value > REG_DWORD
Default 1
Version # 11.0.03
Lock Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown\cServices
Summary Displays the Document Message Bar when a blank signature field is detected.
Details When enabled, the product tries to detect if a document may need to be signed. If the words "Sign" or "Signature" are detected next to any line, a document message bar appears with an "Open Sign Pane" button. Possible values include:
  • 0: Don't detect signature fields.
  • 1: Do detect signature fields.
bEnableSignPane
Supported on WindowsSupported on MacSupported by AcrobatSupported by Adobe Reader

Top>FeatureLockdown>Signing with EchoSign>bEnableSignPane
Data type boolean: DWORD value > REG_DWORD
Default 1
Version # 10.1.2 and later
Lock Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown\cServices
Summary Specifies whether to remove the Sign task pane button from the toolbar.
Details Removing the task pane button removes access to the Sign pane which contains options for certificate signing and signing via EchoSign. Possible values include:
  • 0: Don't show the Sign task pane button.
  • 1 or null: Show the Sign task pane button.
Supported as follows:
  • 10.1.2: Reader only.
  • 11.0 and later: Reader and Acrobat.
It is not possible to remove the EchoSign options under the file menu or on the Welcome screen.
GUI mapping Sign toolbar item
bEnableFillSig
Supported on WindowsSupported on MacSupported by Adobe Reader

Top>FeatureLockdown>Signing with EchoSign>bEnableFillSig
Data type boolean: DWORD value > REG_DWORD
Default 1
Version # 10.1.2 < 11.0
Lock Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown\cServices
Summary Specifies whether to remove the Sign Now panel from the Sign Pane.
Details The Sign Now panel provides a way to sign with a typed signature and a scanned image of your signature. This method does not require certificates or the use of an online service. Possible values include:
  • 0: Don't show the Sign Now panel.
  • 1 or null: Show the Sign Now panel.
GUI mapping Sign > Sign Now panel

Flash

Beginning with 9.5.1, Adobe Reader and Acrobat no longer include a Flash Player for displaying Flash in PDF files. Instead, rendering Flash content embedded in a PDF now requires that a Flash Player already resides on the user machine. This new strategy simplifies Acrobat and Reader deployments by reducing the number of future required updates should a security issue arise. Moreover, you can now manage and update Acrobat products and Flash individually.

If you open a PDF that requires Flash and Flash is not present on the machine, a dialog prompts you to download and install the latest Flash player. To pre-install Flash, go here:

Note: Flash de-coupling is not available in Safari for 9.5.1. Otherwise, Acrobat 9.x products require the Flash Player browser plug-in (Safari and Firefox) version 11.2 or higher. Flash Player 11.2 stopped supporting Windows 2000 and Mac OS lower than 10.6. Therefore, users need at least Windows XP and Mac OS 10.6.x to view Flash content in a PDF.

Summary table
bEnableFlash Specifies whether Flash content should be rendered in a PDF.
bEnableFlash
Security hardeningSupported on WindowsSupported on MacSupported by AcrobatSupported by Adobe Reader

Top>FeatureLockdown>Flash>bEnableFlash
Data type boolean: DWORD value > REG_DWORD
Default 0
Version # 9.5.1 and later
Lock Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown
Summary Specifies whether Flash content should be rendered in a PDF.
Details Possible values include:
  • 0: Flash content is rendered as an empty, white box and does not play. A yellow message bar also appears at the top of the document stating that "Some features are disabled to avoid potential security risks."
  • 1: Flash plays if there is a system player present. If a player is not found, then the user is prompted to download the latest version.

Actions (online resources)

Specifies whether to show the menu item that opens the online Actions file library.

Summary table
bFindMoreWorkflowsOnline Specifies whether to show the menu item that opens the online Actions file library.
bFindMoreWorkflowsOnline
Supported on WindowsSupported on MacSupported by AcrobatSupported by Adobe Reader

Top>FeatureLockdown>Actions (online resources)>bFindMoreWorkflowsOnline
Data type boolean: DWORD value > REG_DWORD
Default null
Version # 11.0+
Lock Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown
Summary Specifies whether to show the menu item that opens the online Actions file library.
Details Possible values include:
  • 0: Disable the menu item.
  • 1 or null: Don't disable the menu item.
GUI mapping Tools > Action Wizard > Find More Online

Tool Sets (online resources)

Specifies whether to show the menu item that opens the online Actions file library.

Summary table
bFindMoreCustomizationsOnline Specifies whether to show the menu item that opens the online Acrobat Tool Set Exchange.
bFindMoreCustomizationsOnline
Supported on WindowsSupported on MacSupported by AcrobatSupported by Adobe Reader

Top>FeatureLockdown>Tool Sets (online resources)>bFindMoreCustomizationsOnline
Data type boolean: DWORD value > REG_DWORD
Default null
Version # 11.0+
Lock Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown
Summary Specifies whether to show the menu item that opens the online Acrobat Tool Set Exchange.
Details Possible values include:
  • 0: Disable the menu item.
  • 1 or null: Don't disable the menu item.
GUI mapping Customizations > Find More Online

Services (Acrobat.com, SharePoint, etc.)

These preferences configure SharePoint and Office365 integration as well as online file storage. Macintosh support begins with 11.0.

Summary table
bDisableADCFileStore Disables storing files on Acrobat.com even when bEnableAcrobatHS = 1.
bDisableCloud Specifies whether to allow access to Acrobat.com from SharePoint and Office365.
bDisableSharePoint
bDisableSharePointFeatures Disables the SharePoint integration features.
bEnableADCFileStore Enables the user interface items that allow storing files on Acrobat.com even when bEnableAcrobatHS = 0.
bDisableADCFileStore
Supported on WindowsSupported on MacSupported by AcrobatSupported by Adobe Reader

Top>FeatureLockdown>Services (Acrobat.com, SharePoint, etc.)>bDisableADCFileStore
Data type boolean: DWORD value > REG_DWORD
Default 0
Version # 11.0+
Lock Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown\cCloud
Summary Disables storing files on Acrobat.com even when bEnableAcrobatHS = 1.
Details This preference has significance only when bEnableAcrobatHS is 1 or is not present. It disables Acrobat.com files storage even when enterprises have enabled all Adobe's hosted services by setting bEnableAcrobatHS to 1. Possible values include:
  • 0: Allow file storage on Acrobat.com.
  • 1: Don't allow file storage on Acrobat.com.
bDisableCloud
Supported on WindowsSupported on MacSupported by AcrobatSupported by Adobe Reader

Top>FeatureLockdown>Services (Acrobat.com, SharePoint, etc.)>bDisableCloud
Data type boolean: DWORD value > REG_DWORD
Default 0
Version # 11.0+
Lock Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown\cCloud
Summary Specifies whether to allow access to Acrobat.com from SharePoint and Office365.
Details This setting overrides bDisableSharePoint , bDisableOnpremSharePoint , bDisableOffice365 , and bDisableSkybox . Possible values include:
  • 0 or null: Don't disable access.
  • 1: Do disable access.
bDisableSharePoint
Supported on WindowsSupported on MacSupported by AcrobatSupported by Adobe Reader

Top>FeatureLockdown>Services (Acrobat.com, SharePoint, etc.)>bDisableSharePoint
Data type
Default
Version # 11.0+
Lock Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown\cCloud
Summary
Details Possible values include:
bEnableADCFileStore
Supported on WindowsSupported on MacSupported by AcrobatSupported by Adobe Reader

Top>FeatureLockdown>Services (Acrobat.com, SharePoint, etc.)>bEnableADCFileStore
Data type boolean: DWORD value > REG_DWORD
Default 1
Version # 11.0+
Lock Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown\cCloud
Summary Enables the user interface items that allow storing files on Acrobat.com even when bEnableAcrobatHS = 0.
Details This preferences turns on Acrobat.com access even when all other services are disabled. Possible values include:
  • 1: Do allow file storage on Acrobat.com.
bDisableSharePointFeatures
Supported on WindowsSupported on MacSupported by AcrobatSupported by Adobe Reader

Top>FeatureLockdown>Services (Acrobat.com, SharePoint, etc.)>bDisableSharePointFeatures
Data type boolean: DWORD value > REG_DWORD
Default null
Version # 10.1 and later
Lock Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown\cSharePoint
Summary Disables the SharePoint integration features.
Details Controls the application's ability to detect that a file came from a Sharepoint server, disables the check-out prompt, and removes the SharePoint specific menu items. Possible values include:
  • 0: Disable the SharePoint integration features.
  • 1: Same as "null." Don't disable the SharePoint integration features.

Forms Central

Summary table
bShowDistAcrobatDotCom Specifies whether to allow Acrobat.com access from the Forms Central application.
bShowDistAcrobatDotCom
Supported on WindowsSupported on MacSupported by AcrobatSupported by Adobe Reader

Top>FeatureLockdown>Forms Central>bShowDistAcrobatDotCom
Data type boolean: DWORD value > REG_DWORD
Default 1
Version #
Path FormsPrefs
Lock Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown\FormsPrefs
Summary Specifies whether to allow Acrobat.com access from the Forms Central application.
Details Possible values include:
  • 0 or null: Disable and lock Acrobat.com access.
  • 1: Enable and lock Acrobat.com access.

Actions (shared folders)

11.0 introduces the ability for admins to configure shared action file directories.

Summary table
tDIPath Specifies a shared action file location.
tName Specifies a shared action file.
tName
Supported on WindowsSupported on MacSupported by AcrobatSupported by Adobe Reader

Top>FeatureLockdown>Actions (shared folders)>tName
Data type text: String value > REG_SZ
Default null
Version # 11.0+
Lock Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown\cWorkflow\cBaseFolders\c(index)
Summary Specifies a shared action file.
Details Possible values include:
  • Any name.
tDIPath
Supported on WindowsSupported on MacSupported by AcrobatSupported by Adobe Reader

Top>FeatureLockdown>Actions (shared folders)>tDIPath
Data type text: String value > REG_SZ
Default null
Version # 11.0+
Lock Path HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown\cWorkflow\cBaseFolders\c(index)
Summary Specifies a shared action file location.
Details Possible values include:
  • Any valid and shared file location.

Copyright 2012 Adobe Systems Inc.