Disable JavaScript in Acrobat Reader for good

For security reasons, I want to disable JavaScript in Acrobat Reader DC in my office.

I found a registry key (HKCU\Software\Adobe\Acrobat Reader\DC\JSPrefs\bEnableJS) that I can deploy via Group Policy which disables JavaScript. So far, so good.

However, once the user opens a PDF file with embedded JavaScript, Acrobat Reader helpfully offers the user the option to re-enable JavaScript with two simple clicks:

Is there some way to tell Acrobat Reader (via some registry or group policy settings) that I really, really don't want to make it easy for my users to do potentially dangerous stuff?

It's OK for me that they can re-enable JavaScript by digging through Edit/Preferences (even though I'd prefer disabling that as well). But it shouldn't be as easy as clicking on a banner.

Solution 1:

Try putting the setting in HKLM and not HKCU. Specifically HKLM\SOFTWARE\WOW6432Node\Policies\Adobe\Acrobat Reader\DC\FeatureLockdown\bDisableJavaScript

There are quite a few other options for locking different aspects of it down.

I am guessing at the key name as I refuse to install their junk on my box. You can read what I read in the included link and fart around to make sure you got it right.

I gathered this information from this page.

Solution 2:

Registry File to Disable Javascript in Acrobat Reader DC:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown]
"bDisableJavaScript"=dword:00000001
"bDisableTrustedFolders"=dword:00000001

Or from the command line:

reg add "HKLM\SOFTWARE\WOW6432Node\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown" /v "bDisableJavaScript" /t REG_DWORD /d "0x00000001" /f

reg add "HKLM\SOFTWARE\WOW6432Node\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown" /v "bDisableTrustedFolders" /t REG_DWORD /d "0x00000001" /f