Don’t Let Adobe Get You Down

Stop the Adobe Updater and Lock Down Your Adobe DC

Stop the pesky Adobe ARM Service Dead in its tracks with Group Policy, and thereby disable and turn off all those stupid and annoying Adobe Acrobat updates. Other benefits: Get another 30 days to evaluate Adobe Acrobat DC, speed up your computer, no need to register for an Adobe account anymore.  You can also use the infamous AMT emulator to disable to adobe logon screen.

Why Stop the Pesky Adobe ARM Software?
Adobe ARM is the Adobe Reader Updater. Stop it dead in its tracks to prevent the annoying and nuisance help desk calls about not being able to update Adobe Acrobat, because we are only domain users. Use it to lock down your Adobe configuration to a specific version of software.  Use Windows Group Policy to ensure these settings get passed down to all of your OU’s computers. These GPO tricks will work with Adobe Acrobat DC running on Windows 7, with a Windows Server 2008 GPO editor.

Make a new GPO called Adobe Lockdown, edit the paths:
Computer Configuration -> Preferences ->Windows Settings -> Registry

Stop Services Dead in their Tracks
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\AdobeARMservice
key is called “Start” it is a  REG_DWORD = 4

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\AGSService
key is called “Start” it is a REG_DWORD = 4

Stop the AdobeAAMUpdater-1.0 startup utility
Only appears in registry when the startup has been disabled from the msconfig.exe list.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\AdobeAAMUpdater-1.0

Remove this key: if present
By removing this key, you will remove the entry from msconfig.exe list of startup programs.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\AdobeAAMUpdater-1.0

This Will prevent the service from showing up in msconfig.exe

Remove This key to prevent Task Scheduler from running AdobeARM.exe at user logon.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Adobe Acrobat Update Task]

Configure User Preferences
Source:  http://www.adobe.com/devnet-docs/acrobatetk/tools/PrefRef/Windows/index.html

Configure a GPO Registry key to “update” the Mode value
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Adobe\Adobe ARM\Legacy\Acrobat\{AC76BA86-1033-FFFF-7760-0C0F074E4100}
Mode is a REG_DWORD
0 == do not download or install updates
3 == install updates

Another interesting registry key is the ManifestURL that usually contains:
https://armmf.adobe.com/arm-manifests/win/AcrobatDCManifest.msi

It contains a link to the installer.  You can stop Adobe software updates in DNS
by making a zone called adobe.com and making a A Record for armmf host.
thereby bypassing the update lookup DNS query.  Normally, DNS would return:
cname records ssl.adobe.com.edgekey.net and e4578.b.akamaiedge.net
By doing so, you will stop Adobe ARM Updater dead in its tracks and smack it down.

Applies to: Adobe Acrobat DC on Windows 7,8 and 10

2 comments

  • oprolevorter

    Really informative and superb body structure of written content, now that’s user friendly (:.

    Reply
  • Virgie Siede

    I like what you guys tend tto bee up too. This ind of clever work
    and exposure! Keep up the terrific works guys I’ve added you guys to my personal blogroll.

    Reply

Leave a comment