Stop the Adobe ARM Services Dead in their Tracks - The Ultimate Adobe Acrobat Hack
Stop the Adobe ARM Service Dead in its tracks with Group Policy
Why Stop the Pesky Adobe ARM Software?
Adobe ARM is the Adobe Reader Updater. Stop it dead in its tracks to prevent the annoying and nuisance help desk calls about not being able to update Adobe Acrobat, because we are only domain users. Use it to lock down your Adobe configuration to a specific version of software. Use Windows Group Policy to ensure these settings get passed down to all of your OU's computers. These GPO tricks will work with Adobe Acrobat DC running on Windows 7, with a Windows Server 2008 GPO editor. Furthermore, if you are a hacker and have cracked the amtlib.dll file to disable the Adobe signon page or you used the AMT Emulator to hack Adobe Acrobat DC, then this bit of advice will be very useful to you. SadeemPC.com is the leading provider of software protection emulators for Adobe products. To keep Adobe Updater from removing the emulator, you need to follow this advice. We wrote a great knowledge base story about making your computer run faster, one of the tips includes turning off unneeded services, and that would include Adobe ARM.
Make a new GPO called Adobe Lockdown, edit the paths:
Computer Configuration -> Preferences ->Windows Settings -> Registry
Stop Services Dead in their Tracks
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\AdobeARMservice
key is called "Start" it is a REG_DWORD = 4
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\AGSService
key is called "Start" it is a REG_DWORD = 4
Stop the AdobeAAMUpdater-1.0 startup utility
Only appears in registry when the startup has been disabled from the msconfig.exe list.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\AdobeAAMUpdater-1.0
Remove this key: if present
By removing this key, you will remove the entry from msconfig.exe list of startup programs.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\AdobeAAMUpdater-1.0
Why Stop the Pesky Adobe ARM Software?
Adobe ARM is the Adobe Reader Updater. Stop it dead in its tracks to prevent the annoying and nuisance help desk calls about not being able to update Adobe Acrobat, because we are only domain users. Use it to lock down your Adobe configuration to a specific version of software. Use Windows Group Policy to ensure these settings get passed down to all of your OU's computers. These GPO tricks will work with Adobe Acrobat DC running on Windows 7, with a Windows Server 2008 GPO editor. Furthermore, if you are a hacker and have cracked the amtlib.dll file to disable the Adobe signon page or you used the AMT Emulator to hack Adobe Acrobat DC, then this bit of advice will be very useful to you. SadeemPC.com is the leading provider of software protection emulators for Adobe products. To keep Adobe Updater from removing the emulator, you need to follow this advice. We wrote a great knowledge base story about making your computer run faster, one of the tips includes turning off unneeded services, and that would include Adobe ARM.
Make a new GPO called Adobe Lockdown, edit the paths:
Computer Configuration -> Preferences ->Windows Settings -> Registry
Stop Services Dead in their Tracks
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\AdobeARMservice
key is called "Start" it is a REG_DWORD = 4
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\AGSService
key is called "Start" it is a REG_DWORD = 4
Stop the AdobeAAMUpdater-1.0 startup utility
Only appears in registry when the startup has been disabled from the msconfig.exe list.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\AdobeAAMUpdater-1.0
Remove this key: if present
By removing this key, you will remove the entry from msconfig.exe list of startup programs.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\AdobeAAMUpdater-1.0
This Will prevent the service from showing up in msconfig.exe
Remove This key to prevent Task Scheduler from running AdobeARM.exe at user logon.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Adobe Acrobat Update Task]
Configure User Preferences
Source: http://www.adobe.com/devnet-docs/acrobatetk/tools/PrefRef/Windows/index.html
Configure a GPO Registry key to "update" the Mode value
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Adobe\Adobe ARM\Legacy\Acrobat\{AC76BA86-1033-FFFF-7760-0C0F074E4100}
Mode is a REG_DWORD
0 == do not download or install updates
3 == install updates
Another interesting registry key is the ManifestURL that usually contains:
https://armmf.adobe.com/arm-manifests/win/AcrobatDCManifest.msi
It contains a link to the installer. You can stop Adobe software updates in DNS
by making a zone called adobe.com and making a A Record for armmf host.
thereby bypassing the update lookup DNS query. Normally, DNS would return:
cname records ssl.adobe.com.edgekey.net and e4578.b.akamaiedge.net
By doing so, you will stop Adobe ARM Updater dead in its tracks and smack it down.
Applies to: Adobe Acrobat DC on Windows 7,8 and 10
Remove This key to prevent Task Scheduler from running AdobeARM.exe at user logon.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Adobe Acrobat Update Task]
Configure User Preferences
Source: http://www.adobe.com/devnet-docs/acrobatetk/tools/PrefRef/Windows/index.html
Configure a GPO Registry key to "update" the Mode value
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Adobe\Adobe ARM\Legacy\Acrobat\{AC76BA86-1033-FFFF-7760-0C0F074E4100}
Mode is a REG_DWORD
0 == do not download or install updates
3 == install updates
Another interesting registry key is the ManifestURL that usually contains:
https://armmf.adobe.com/arm-manifests/win/AcrobatDCManifest.msi
by making a zone called adobe.com and making a A Record for armmf host.
thereby bypassing the update lookup DNS query. Normally, DNS would return:
cname records ssl.adobe.com.edgekey.net and e4578.b.akamaiedge.net
By doing so, you will stop Adobe ARM Updater dead in its tracks and smack it down.
Applies to: Adobe Acrobat DC on Windows 7,8 and 10
Comments
Post a Comment