Details

By default, Adobe online services are tightly integrated into Adobe Reader DC. Disabling Service Upgrades disables both updates to the product’s web-plugin components as well as all services without exception, including any online sign-in screen.

Solution

Configure the following registry value:

Note: The Key Name ‘cServices’ is not created by default in the Adobe Reader DC install and must be created.

Registry Hive: HKEY_LOCAL_MACHINE
Registry Path: SoftwarePoliciesAdobeAcrobat Reader2015FeatureLockDowncServices

Value Name: bUpdater
Type: REG_DWORD
Value: 0

Supportive Information

The following resource is also helpful.

• https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Adobe_Acrobat_Reader_DC_Classic_V2R1_STIG.zip

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Windows.

References

• 800-53|CM-7a.
• CAT|III
• CCI|CCI-000381
• Rule-ID|SV-213160r557349_rule
• STIG-ID|ARDC-CL-000120
• STIG-Legacy|SV-80287
• STIG-Legacy|V-65797
• Vuln-ID|V-213160

Source

• Tenable.com/audits