Windows Information Protection Policy doesn't work on Adobe Reader

Sabarish Natarajan 456

Hi Team,

I have created WIP policy to protect the default recommended apps. Along with that i have also included the Adobe Acrobat Reader DC as allowed App.
But the policy get applies on all apps except Adobe Acrobat Reader DC. I verified that the Desktop App settings in WIP is right, but still stuck. Below are some of the reference image. Any experts to help here please!!!

Name: Acrobat Reader DC
Product Name: Acrobat Reader
Type: Desktop Apps
Publisher: *
File: acrord32.exe
Min Version: *
Max Version: *
Action: Allow

I have also tried with publisher as "O=ADOBE INC., L=SAN JOSE, S=CA, C=US"

1 answer

Lu Dai-MSFT 28,356 Reputation points

2020-12-16T09:55:11.67+00:00
@Sabarish Natarajan Thanks for posting in our Q&A.

From this issue, I have done the test in my lab. Here are some detailed information about protected apps in WIP configuration in the following image:

When I deploy this WIP to my user group successfully, I check the enterprise context of details in task management. I find that this WIP works on Adobe Reader.

To clarify this issue, we appreciate your help to collect the following information:

Please get full screen shots of the WIP configurations and all protected app in WIP.

Check if there is any error information in Event Viewer > Windows Logs > Applications and Services Logs > Microsoft > Windows > DeviceManagement-Enterprise-Diagnostic-Provider

Hope it can help.

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Please sign in to rate this answer.

1 person found this answer helpful.
Sabarish Natarajan 456 Reputation points

2020-12-16T12:07:23.21+00:00

Hi @Lu Dai-MSFT ,

Thanks for the response. As mentioned in my post, I have tried specifying the publisher details but still the policies are not getting applied. And under the Enterprise Context it shows as Personal.

I have configured this for few other customers earlier which works without any issue. But for this customer\tenant it is not happening. I suspect, there should be some issue that needs to be fixed at the backend !!!

Sabarish Natarajan 456 Reputation points

2020-12-16T12:21:57.65+00:00

@Lu Dai-MSFT ,

I wonder how you leave Min & Max version as black. I couldn't see Save option.

Sabarish Natarajan 456 Reputation points

2020-12-16T12:42:09.05+00:00

@Lu Dai-MSFT :- Sorry Just checked the Event View logs and found the below error.

MDM ConfigurationManager: Command failure status. Configuration Source ID: (C51847EB-601D-4099-B50A-34D879F6EA54), Enrollment Name: (MDMDeviceWithAAD), Provider Name: (Policy), Command Type: (Add: from Replace or Add), CSP URI: (./Device/Vendor/MSFT/Policy/ConfigOperations/ADMXInstall/Receiver/Properties/Policy/FakePolicy/Version), Result: (The system cannot find the file specified.).

Lu Dai-MSFT 28,356 Reputation points

2020-12-17T07:23:35.71+00:00

@Sabarish Natarajan I notice that the computer name is the privacy information. To protect the privacy information in your environment, we suggest to hide this information. Thanks.

Sabarish Natarajan 456 Reputation points

2020-12-17T07:37:44.523+00:00

@Lu Dai-MSFT Thanks for that. Any suggestion on troubleshooting steps !?

Lu Dai-MSFT 28,356 Reputation points

2020-12-17T08:36:14.243+00:00

@Sabarish Natarajan Thanks for your response.

I have done the test again and got more detailed configurations in WIP as a reference in the following image:
Name: Acrobat Reader DC
Publisher: O=ADOBE INC., L=SAN JOSE, S=CA, C=US
Product name, Min Version, Max Version are all set to "*"

Then, I deploy this WIP to my user group , and I check the enterprise context of details in task management. This WIP works on Adobe Reader.

Hope the above information will help you.

Lu Dai-MSFT 28,356 Reputation points

2020-12-22T08:05:43.483+00:00

@Sabarish Natarajan I am currently standing by for further update from you and would like to know how things are going. If you have any questions or concerns on the recent information I've provided you, please don't hesitate to let me know.

Sabarish Natarajan 456 Reputation points

2020-12-22T08:36:21.527+00:00

@Lu Dai-MSFT I have replaced the Product name field with * and that fixed the issue.

Lu Dai-MSFT 28,356 Reputation points

2020-12-22T08:46:19.257+00:00

@Sabarish Natarajan Thanks for your response.

I'm glad to hear that you have fixed this issue. If you have any problem in the future, welcome to post in our Q&A.

Thanks and have a nice day. : )

Sabarish Natarajan 456 Reputation points

2020-12-24T10:03:05.94+00:00

Thanks @Lu Dai-MSFT ,

I am facing similar issue with Google Drive. I have posted it in separate Q&A.

https://learn.microsoft.com/en-us/answers/questions/208158/how-to-protect-google-drive-backup-amp-sync-windws.html

Lu Dai-MSFT 28,356 Reputation points

2020-12-28T01:34:19.427+00:00

@Sabarish Natarajan Thanks for your post.

I have done the test and answered this question about Google Drive last Thursday. Please check in the answer and command.

Hope it can help.
Sign in to comment

Share via

Windows Information Protection Policy doesn't work on Adobe Reader

1 answer