Addressing 'Disable JavaScript on Adobe Reader DC

Question

Hello All,

Can somebody please assist. How do I Address Defender Security Recommendation 'Disable JavaScript on Adobe DC. I have 100 devices that needs remediation, is there a PS script I can run or another option?

Answer 1

@Jay Tee, Thanks for posting in Q&A. Based on my researching; to disable JavaScript on Adobe Reader DC, we can add the following registry key.

reg add "HKLM\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown" /v bDisableJavaScript /t REG_DWORD /d 00000001 /f

You can firstly test on one device to see if it can work. If it works, then we can deploy via PowerShell Script to add and set this registry key. Here is a link with examples for your reference:

https://scloud.work/registry-key-with-intune/

Note: None-Microsoft link, just for the reference.

Hope the above information help.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

@Jay Tee, Thanks for your update. I am glad the registry key can work. Then we can deploy this via PowerShell script. Here is the script for your reference:

$Path = "HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown"
$Key = "bDisableJavaScript"
$KeyFormat = "dword"
$Value = "1"
if(!(Test-Path $Path)){New-Item -Path $Path -Force}
if(!$Key){Set-Item -Path $Path -Value $Value
}
else{Set-ItemProperty -Path $Path -Name $Key -Value $Value -Type $KeyFormat}

Hope the above information can help.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.