Disabling “Enable Protected Mode at startup” and “Enable Enhanced Security” for Adobe Acrobat Reader DC 2015

I recently had to troubleshoot an issue with PDFs failing to launch within an Internet Explorer window which lead to a resolution that required two security features in Adobe Acrobat Reader DC 2015 to be disabled and thought that I’d write this post to demonstrate the process so I could reference it when I write the post describing that issue.  Note that I am not recommending to disable these features as it renders the reader much less secure so please carefully evaluate other alternatives if they exist.

The reader I’ll be modifying will be the Adobe Acrobat Reader DC 2015 Release | Version 2015.009.20079

The two features we’ll be disabling are:

Enable Protected Mode at startup

… and:

Enable Enhanced Security

… listed in the Security (Enhanced) category:

To disable the Enable Protected Mode at startup configuration, navigate to the following registry key:

HKEY_CURRENT_USERSoftwareAdobeAcrobat ReaderDCPrivledged

… then modify the bProtectedMode REG_DWORD value to 0 to disable and 1 to enable:

To disable the Enable Enhanced Security configuration, navigate to the following registry key:

HKEY_CURRENT_USERSoftwareAdobeAcrobat ReaderDCTrustManager

… then modify the bEnhancedSecurityStandalone REG_DWORD value to 0 to disable and 1 to enable:

Perform the same change to bEnhancedSecurityInBrowser if you want the same change for PDFs launched in browsers.

To automate these configuration changes, you can either use a GPO that launches a batch file containing REG ADD:

reg add “HKCUSoftwareAdobeAcrobat ReaderDCPrivileged” /v “bProtectedMode” /t REG_DWORD /d 0 /f

reg add “HKCUSoftwareAdobeAcrobat ReaderDCTrustManager” /v “bEnhancedSecurityStandalone” /t REG_DWORD /d 0 /f

reg add “HKCUSoftwareAdobeAcrobat ReaderDCTrustManager” /v “bEnhancedSecurityInBrowser” /t REG_DWORD /d 0 /f

… or use Group Policy Preferences to add/update the key.