Forum Discussion
braedachau
Jan 24, 2021Brass Contributor
Acrobat DC Reader Vulnerabilities - Endpoint Manager - PowerShell
To whom it may concern, Please excuse me but I believe the post belongs here not in the PowerShell discussion. I deleted the post placed in the PowerShell group Background: I have a test t...
- Feb 10, 2021
Hello braedachau,
the issue is caues by the if condition, the path you try to check cannot be found because it does not exist when Adobe DC is not installed. (I believe that the registries have not been set by Adobe DC then.)
Try it with "Test-Path"
Example:
#Check path If (Test-path -Path 'Registry::HKLM\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown') {}
braedachau
Feb 10, 2021Brass Contributor
Great. I'll do that, thanks
travisrauh
Mar 31, 2021Copper Contributor
Hey braedachau,
Did MK_Nils suggestion work? If so, do you think you'd be willing to show me exactly where you added that "test-path" in to your code? I'm unfortunately self-teaching, our environment is setup the exact same way as yours (pure cloud, recommendations from WDATP, etc.), and I'm trying to follow those two same recommendations.
Did MK_Nils suggestion work? If so, do you think you'd be willing to show me exactly where you added that "test-path" in to your code? I'm unfortunately self-teaching, our environment is setup the exact same way as yours (pure cloud, recommendations from WDATP, etc.), and I'm trying to follow those two same recommendations.
- braedachauMar 31, 2021Brass ContributorTravis,
All code in use is here. If you find issues let me know and you would obviously be aware that lag in the MSDE portal can take 24 hours to reflect changes.
https://github.com/Braedach/Intune-Registry-Scripts
Thanks- travisrauhApr 01, 2021Copper ContributorWow. Thank you so much for this!!
- braedachauApr 01, 2021Brass Contributor
Travis I just realized something that you need to know.
If you use PowerShell to manage devices, the controls will remain in place after the machine is offboarded. So if the machine is a BYOD and the client disengages from the tenant he/she will be stuck with the changes in the registry, without a clean install..
This could be a problem.
Regards