Mms.cfg whitelist for localstorage

As of now, we use mms.cfg to block all local storage of shared objects.  Our developers have requested that we open up storage for one of their flash projects.  I don't want to allow ALL sites the ability to create and store shared objects, just from our domain.  Is there anyway, through mms.cfg, that I can create a whitelist of domains that are allowed to create shared objects and block all other sites?

I read that guide before posting the question, but couldn't find what I was looking for.  It may be in there, but I couldn't find it... as of now, my mms.cfg file includes the following lines:
LocalStorageLimit=1
ThirdPartyStorage=0
This effectively prohibits shared objects from being created and stored locally (at least it seems it does) from any domain.  What specifically would I need to include so that write access is blocked for all sites except for any domain that I have listed?  As far as I can see, it appears to be an all or nothing type of thing.

Similar Messages

  • MMS.CFG getting reset when contacting Adobe for updates

    Hello!
    I noticed two days ago that many users were getting prompts for updates.
    I had deployed Flash 11.8 in July with the following MMS.CFG settingS:
    AutoUpdateDisable=0
    AutoUpdateInterval=1
    SilentAutoUpdateEnable=1
    Today I noticed the most users MMS.CFG was this:
    AutoUpdateDisable=0
    AutoUpdateInterval=1
    SilentAutoUpdateEnable=0.
    Hence, not knowing what caused it, I decided to replace the file using SCCM for all users. Once it replaced successfully I thought our problem was solved.
    WRONG!
    After the file was replaced, about 10-20 minutes later I saw users trying to connect to Adobe from our FW logs. As soon as they contacted Adobe the MMS.CFG file was reset again to this:
    AutoUpdateDisable=0
    AutoUpdateInterval=1
    SilentAutoUpdateEnable=0
    Any idea what could be causing this?

    I have seen several postings like this one in the Forums, and I am having this problem too. No one has a solution that I can see. ʇɐb ɹəuəllıʍ suggested reporting it as a bug.
    Here is a workaround I came up with for Windows 7 by reverse engineering Flash configuration:
    On a test machine with default, or your preferred settings applied, go to Window Control Panel, and double click the Flash Player applet, which brings up: "Flash Player Settings Manager""
    Click on the "Advanced" tab
    Check: "Never check for updates (not recommended)"
    Close "Flash Player Settings Manager"
    This action will modify the file:
    C:\Users\<user>\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol
    Now, you can copy this file from the test machine to other machines / User profiles to "clone" the  "Never check for updates (not recommended)" setting.
    PS
    I don't know if this applies to Windows XP. My guess is the mms.cfg works fine there.
    -Mitch
    Systems Administrator

  • Using mms.cfg file to enable Autoupdate for non-Admin users

    I need help in getting this to work.  So far it does not.
    Adobe Flash for windows 17.0.0.23
    Windows 7 Enterprise  - 5000 systems
    Users are not administrators on systems.
    The Non admin user gets prompted with a screen ( we do not want any prompts)
    Then the install fails because they are not an administrator.
    My mms.cfg file:
    AutoUpdateDisable=0
    AutoUpdateInterval=1
    SilentAutoUpdateEnable=1
    How do I use this or any other method to have Adobe Flash update automaticly for all users including non-admins
    and give no prompts?
    What are the next steps.  Is there an enterprise support site or method to use for mass distributions for Flash?
    Please Get back to me today before 12:00 EDT 13 Apr 2015.
    Gary Pearson
    401-233-6898

    Hi garyp81126656,
    The current mms.cfg file configuration will perform either a notification update or a background update. There are a few options to update non-admin users:
    Host the background update resources locally.  When using the Adobe servers for background updates there is no way to disable notification updates.  By hosting the background update resources locally users will never be prompted to update.
    Disable updates and deploy Flash Player updates via SCUP, SMS, or Group Policy.
    You can find the various deployment options are listed in Chapter 3 of the Flash Player Administrator's Guide.  The Admin Guide also contains information to license Flash Player for distribution within your organization, which is a requirement for any of the deployment methods described in the Admin Guide.  Additional information is available at An outline of Flash Runtime installation options
    Maria

  • Asking for clarification: SilentAutoUpdateEnable=1 in mms.cfg requires SilentAutoUpdateServerDomain?

    Hello all
    I read quite som threads on the silent Flash Player upgrade (amongn them How it works, long thread on not working updates, fixed bug on SSL certs), and got it finally working on our internal server but not directly from Adobe. <edit>In one discusison - which I unfortunately cannot find anymore - In this post, Chris stated 11.4 requiring an internal server, e.g.</edit> when adding SilentAutoUpdateEnable to the mms.cfg, also SilentAutoUpdateServerDomain had to be specified.
    <edit>My tests seem to confirm this for player 11.4.402.287, I only see these lines in the FlashInstall.log when running the Adobe Flash Player Updater scheduled task:
    2012-11-26+10-54-41.306 [info] 1614
    2012-11-26+10-54-41.384 [info] 1615
    2012-11-26+10-54-41.446 [info] 1618
    2012-11-26+10-54-41.509 [info] 1619 1063
    2012-11-26+10-54-41.571 [info] 1614
    2012-11-26+10-54-41.571 [info] 1615
    2012-11-26+10-54-41.571 [info] 1618
    2012-11-26+10-54-41.587 [info] 1608
    2012-11-26+10-54-41.587 [info] 1604
    2012-11-26+10-54-41.837 [info] 1612
    2012-11-26+10-54-41.837 [info] 1620
    My mms.cfg contains the following lines:
    AutoUpdateDisable=0
    SilentAutoUpdateEnable=1
    SilentAutoUpdateVerboseLogging=1
    When setting up an internal server and adding SilentAutoUpdateServerDomain, the update works as expected. If this is true, this Was this a limitation of 11.4, which is gone for 11.5? Having a mandatory requirement for internal server </edit> seems to contradict the spirit of the Adobe Flash Payer 11.5 Deployment Guide. Why have two sections (pages 18/19), first "Performing a background update" and then "Background updates from an internal server" if silent updates always require an internal server?
    Would anyone care to share their understanding? Does SilentAutoUpdateEnable require SilentAutoUpdateServerDomain <edit>for 11.5</edit>?
    Regards
    /Maurice
    Edited to specify observed update behavior for 11.4 with and without SilentAutoUpdateServerDomain

    Hi Maurice,
    You do not have to have SilentAutoUpdateServerDomain set for SilentAUtoUpdateEnable.  With the release of 11.5 (or any major release), we do not update through the silent auto update (SAU) system for the first 30 days.  This can be circumvented by setting up your own internal SilentAutoUpdateServerDomain.
    http://blogs.adobe.com/spohl/2012/04/24/it-admin-deploying-flash-player-via-background-upd ater/
    Thanks,
    Chris

  • Using mms.cfg In The Enterprise

    Hello, I’m currently investigating the best ways to install Flash Player in our corporate environment I’ve competed the request for enterprise downloads and I now have the access to the EXE & MSI installs.
    Briefly reading the Administration guide I now know that I can use mms.cfg to disable updates a requirement in our network due to the lack of admin rights.
    We will manage updates and fresh installs with SCCM 2012
    I want to be able to install Flash Player during OSD (Operating System Deployment) and also on existing machines what are the best proven methods of delivering the custom mms.cfg ?
    Can this be done with the command line if I use the EXE Bootstrapper install and not the MSI?
    Or do I have to look at using group policy or a script to deliver this file outside of the installation
    For Adobe reader I’m currently using the bootstrapper to install reader 11 and the latest MSP at the same time I’d like to do something similar for my Flash Player installs

    My solution was as follows:
    1. In SCCM 2012, I created an application for flash player based on the MSI deployment.
    2. Created a second deployment type that executes a .CMD file with the following batch code in it (set dependency pointing to the Flash MSI completing successfully as well):
    REM In case folders don't exist, create them
    MD %WINDIR%\System32\Macromed\Flash
    MD %WINDIR%\SysWow64\Macromed\Flash
    REM Delete existing completion files
    Del %WINDIR%\System32\Macromed\Flash\Complete.flag
    Del %WINDIR%\SysWow64\Macromed\Flash\Complete.flag
    REM Copy System32 CFG file and then copy the complete flag
    Copy /y %~dp0mms.cfg %WINDIR%\System32\Macromed\Flash
    Copy /y %~dp0Complete.flag %WINDIR%\System32\Macromed\Flash
    REM Copy SysWow64 CFG file and then copy the complete flag
    Copy /y %~dp0mms.cfg %WINDIR%\SysWow64\Macromed\Flash
    Copy /y %~dp0Complete.flag %WINDIR%\SysWow64\Macromed\Flash
    Note: Completion.flag is merely a text file that gives me an easy way to know if the script finished running or not. I check for it's existence in both locations to consider the process complete.    
    This has worked for me. The only hangup I had was that I set the MSI verification on the filename of the OCX that the installer puts in the System32 and SysWow64 folders not realizing that the filename is backwards from what I expected. System32 has the "Flash64..." file and SysWow64 has the "Flash32..." file. Goofy, I know.
    Hope this helps.

  • Controlling autoupdate of Adobe Flash Player ActiveX with mms.cfg file

    For several years we have suppressed Flash Player ActiveX from autoupdating by using the mms.cfg file, with the setting "AutoUpdateDisable=1" -- and it has worked without a problem.
    With the constant updates of Flash Player for security reasons, we decided several months ago to change the autoupdate setting and allow Flash Player ActiveX to update automatically, without notifying the user, checking every seven days.  We changed the mms.cfg file to this:
    AutoUpdateDisable=0
    AutoUpdateInterval=7
    SilentAutoUpdateEnable=1
    We are using Windows 7 64-bit, so the mms.cfg file was copied/updated to: C:\Windows\SysWOW64\Macromed\Flash, as well as C:\Windows\System32\Macromed\Flash
    The problem we are randomly seeing across our 2500+ computers is a notification that a Flash Player update is available.  This is occurring on machines with the mms.cfg file in place.
    Does anyone else have this same issue?  We were also wondering if the encoding of the file, i.e., ANSI or UTF-8, has any bearing on the effectiveness of this mms.cfg file. Or has a registry setting been updated overriding the mms.cfg?
    We believe the file is encoded in UTF-8, but it is difficult to be 100% certain of this.
    Screenshot of the auto-update notification:
    Thanks
    Currently running Flash Player ActiveX 11.9.900

    You're right, it sounds very malwareish, but they will know more in the Flash Player forum  http://forums.adobe.com/community/flashplayer . This is teh Adobe Reader forum. When you post there, a screen shot may help.

  • Linux ignores mms.cfg

    Creating a /etc/adobe/mms.cfg does not appear to work in several versions of Linux that I have tested with several versions of flash 10.
    Of course, I would not need this if the camera and microphone security dialog issues was fixed.
    Any help would be appreciated.... or confirmation that this is broken with a workaround would be nice too!

    I read that guide before posting the question, but couldn't find what I was looking for.  It may be in there, but I couldn't find it... as of now, my mms.cfg file includes the following lines:
    LocalStorageLimit=1
    ThirdPartyStorage=0
    This effectively prohibits shared objects from being created and stored locally (at least it seems it does) from any domain.  What specifically would I need to include so that write access is blocked for all sites except for any domain that I have listed?  As far as I can see, it appears to be an all or nothing type of thing.

  • Linux. "OverrideGPUValidation=true" (in mms.cfg) doesn't work.

    In advance I am sorry for bad English language. I Russian man, and use the program the translator.
    Linux (32 and 64-bit). NVIDIA GeForce GTX 560 Ti. Proprietary driver. Flash Player 11 ( (32 and 64-bit)).
    "OverrideGPUValidation=true" (in mms.cfg) doesn't work. 
    On YouTube (in "Show video info") it is written "softvare video rendering" 
    How it to correct? Can the option has changed? 
    PS. 
    "EnableLinuxHWVideoDecode=1" works (On YouTube (in "Show video info") it is written "accelerated video decoding"). 
    How to turm on, "accelerated video rendering"?

    UP. How, now, to include "accelerated video rendering" (without it (in Linux) flickers Flash (at least Flash Games))?..

  • Flash Player won't read mms.cfg

    I am in the process of deploying Flash 10.3 out via group policys.  I seem to have trouble disabling autoupdate.  I am trying to put the file in "C:\Windows\SysWOW64" and it's called "mms.cfg" and encoded in UTF-8 via notepad (And I tried ASCII too!).  No matter what I do, the option for auto-updating is always enabled in the control panel settings for Flash. I am using the text "AutoUpdateDisable=1" in the file.
    As directed to in the adobe documentation of mms.cfg on how to verify that it's reading the file, I have also turned on autoupdating and set the frequency to 0 to enable it to check every time flash launches for an update.  I have looked at the network traffic with Wireshark and I do not see Flash looking to update as it should in this situation.
    The opearating system is Windows 7 Enterprise x64 w/ SP1.  It does this with version 10.2 r159 as well as 10.3.181.14.  The browsers are Firefox 4.01 as well as Internet Explorer 9.  The exact file I am using is this http://dl.dropbox.com/u/912267/mms.cfg

    I have seen several postings like this one in the Forums, and I am having this problem too. Reporting it as a bug sounds great, but if you want something that works now....
    Here is a workaround I came up with for Windows 7 by reverse engineering Flash configuration:
    On a test machine with default, or your preferred settings applied, go to Window Control Panel, and double click the Flash Player applet, which brings up: "Flash Player Settings Manager""
    Click on the "Advanced" tab
    Check: "Never check for updates (not recommended)"
    Close "Flash Player Settings Manager"
    This action will modify the file:
    C:\Users\<user>\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol
    Now, you can copy this file from the test machine to other machines / User profiles to "clone" the  "Never check for updates (not recommended)" setting.
    PS
    I dont know if this applies to Windows XP. My guess is the mms.cfg works fine there.
    -Mitch
    Systems Administrator

  • Issue with testing mms.cfg and AutoUpdateDisable=0 or 1

    I am testing the mms.cfg values to confirm Flash 11.2.202.228 does not check for any updates and I am seeing behavior that I don't recall seeing in the past versions. First I am testing Flash configured to auto update (values AutoUpdateDisable=0 and AutoUpdateInterval=0) so that I know exactly what behavior I do not want when I set it to not auto update (AutoUpdateDisable=1) - When I have AutoUpdateDisable=0 and AutoUpdateInterval=0 set I would expect that when sniffing the packets I would see Flash check for updates each time I open IE and access a page with flash content, however it seems to only check the first time. For example, I open IE and hit a page with flash content I can see fpdownload2.macromedia.com is being checked which is expected since its not disabled, however if I close IE and reopen it and access a page with Flash content I do not see fpdownload2.macromedia.com hit again. I have attempted to reboot and even wait an hour or two but I never see it hit again. Is there a new setting that isnt documented or one that I am completley overlooking that I need to specify that tells flash to check everytime or am I doing something wrong? The problem is, Flash behaves the same when I have auto update disabled (AutoUpdateDisable=1and AutoUpdateInterval=0) which makes it difficult to confirm it is working as intended.
    Note: I am using Netmon to sniff the packets. Mms.cfg is saved in the default installation dir (windows\system32\Macromed\Flash) with UTF-8 encoding.

    Here's what I've heard back from our installer engineers;
    It should check every time.  I executed the following tests on 32-bit Windows 7 with Firefox 11 and IE8, using Charles Proxy.
    10.3.183.18:
    ActiveX: I see the request to fpdownload2.macromedia.com when first viewing Flash content after installation and upon relaunching the browser.  I do not see the request when refreshing the browser, but the request is made (I tested by deleting and modifying the FlashPlayerUpdate registry key refreshed the browser and the key was created/updated).
    Plugin: I do not see the request to fpdownload2.macromedia.com, however, the request is sent.  I verified by deleting the FlashPlayerUpdate registry entry and again by modifying its contents. When I relaunch or refresh the browser, the key is created / updated.
    11.2.202.228 (selecting ‘Notify me when updates are available’ option)
    ActiveX: Same behaviour as with 10.3.183.18
    Plugin: I did not see the request to fpdownload2.macromedia.com in Charles, and the FlashPlayerUpdate entry being created.  I cleared the browser cache and then the request was made.  After that, the request was sent without having to clear the browser cache.  In subsequent tests, I did not see the subsequent requests in Charles, but I confirmed that it was sent because I modified/deleted the FlsahPlayerUpdate key and it was updated/created when I relaunched/refreshed the browser.  This is the only time I cleared the browser cache during this testing.
    11.2.202.228 (selecting Install updates automatically when available)
    ActiveX: Same behaviour as with 10.3.183.18 and 11.2.202.228 when ‘notify me when updates are available’ option is selected.
    Plugin: I did not see the request to fpdownload2.macromedia.com in Charles, but the request was sent as the FlashPlayerUpdate key was created. And it was updated when refreshing the browser.
    11.3.r300.219 (selecting ‘notify me when updates area available’ option)
    ActiveX: Same behaviour as with 10.3.183.18 and 11.2.202.228 when ‘notify me when updates are available’ option is selected.
    Plugin: I did not see the request to fpdownload2.macromedia.com in Charles, but the request was sent as the FlashPlayerUpdate key was created. And it was updated when refreshing the browser.
    From this testing, it appears that even if the request does not appear in Charles proxy, it is being made, as confirmed with the FlashPlayerUpdate key being updated/created.
    I'll find out the exact location of the FlashPlayerUpdate key and post back.
    Chris

  • Flash pushed via GPO, how to copy mms.cfg via logon script?

    I feel foolish for having to ask such a question, but I can't get it figured out.  I know very little about VBS scripting and need help pushing the mms.cfg file down to the clients via the logon script.  Can someone please provide me the proper commands to enter into our existing vbs scripts?  I sure would appreciate it!

    I got it figured out...well, kinda.  I gave up on trying to do it via the logon script and instead modified the GPO for the flash install to call a batch file in the startup script section.
    This is the contents of the batch file that I created:
    @echo off
    if exist "C:\WINNT\System32\Macromed\Flash\" goto :NT2k
    if exist "C:\WINDOWS\System32\Macromed\Flash\" goto :XPVista
    if exist "C:\Windows\System\Macromed\Flash\" goto :Legacy
    if exist "C:\Windows\SysWOW64\" goto :64bit
    goto :END
    :NT2k
    if exist C:\WINNT\System32\Macromed\Flash\mms.cfg goto :END
    xcopy \\SERVERNAME\NETLOGON\mms.cfg C:\WINNT\System32\Macromed\Flash\ /o /y
    goto :END
    :XPVista
    if exist C:\WINDOWS\System32\Macromed\Flash\mms.cfg goto :END
    xcopy \\SERVERNAME\NETLOGON\mms.cfg C:\WINDOWS\System32\Macromed\Flash\ /o /y
    goto :END
    :Legacy
    if exist C:\Windows\System\Macromed\Flash\mms.cfg goto :END
    xcopy \\SERVERNAME\NETLOGON\mms.cfg C:\Windows\System\Macromed\Flash\ /o /y
    goto :END
    :64bit
    if exist C:\Windows\SysWOW64\mms.cfg goto :END
    xcopy \\SERVERNAME\NETLOGON\mms.cfg C:\Windows\SysWOW64\ /o /y
    goto :END
    :END
    I've tested it on both an XP box and Windows 7 64-bit box and it works perfectly! The one thing I am not sure of is what directory the cfg file needs to go in for a 32-bit install of Windows 7.  We don't have any of those here yet, but that's something I'll have to remember once we do.  I hope this helps those out there trying to push the mms.cfg file via GPO to disable that auto-update feature!

  • Need Help configuring updates via mms.cfg

    I am running Win 7 x64 and have both the ActiveX and Plugin installed. My Flash Player version is 11.9.900.117 and when I open the Flash Player entry in Control Panel and go to the Advanced tag and click Check Now, the resulting page says the current version is 11.9.900.152.
    I followed the the instructions here (http://helpx.adobe.com/flash-player/kb/administration-configure-auto-update-notification.h tml) and in the admin guide (http://www.adobe.com/devnet/flashplayer/articles/flash_player_admin_guide.html) to configure for updates using the mms.cfg file. My mms.cfg file contains 3 lines (below) and is placed in C:\Windows\SysWOW64\Macromed\Flash.
    AutoUpdateDisable=0
    SilentAutoUpdateEnable=1
    AutoUpdateInterval=0
    From all the instructions, the update check should happen at each run of Flash Player per AutoUpdateDisable=0 & AutoUpdateInterval=0 and then should silently install per SilentAutoUpdateEnable=1, but I cannot get my Flash Player to update. I have restarted my computer and IE multiple times; visiting a Flash enabled sites in between to kickstart the process, but no luck.
    I am testing this process to deploy to about 2500 machines in my organization. I can't even get to work on my machine though. Any help is appreciated.

    We are having the same problem.
    We got 250 client, and only some of the clients receive a prompt on login (who shuld not happend, se mms.cfg) with information on downloading 11.9.900.152.
    But downloading and install is not posible unless user is a Administrator on the PC.
    mms.cfg
    AutoUpdateDisable=0
    AutoUpdateInterval=0
    SilentAutoUpdateEnable=1
    Reagards RoarSk

  • Prevent Peer-Assist Popup with mms.cfg?

    Hi,
    Is there something you can put into mms.cfg to prevent the "accept/deny" dialog box from popping up when using peer-assisted multicast.
    This is useful for load testing peer-assisted multicast as well as for large companies to pre-configure their systems to automatically allow peer-assist from certain domains.
    Sicnerely,
    -Greg Pulier

    I've asked around and there doesn't appear to be any property that would allow you to suppress this.  You could open a feature request (bugbase.adobe.com) but it might be easier to do this with another utility that would allow you to automate UI (for example, http://www.sikuli.org/).
    Adobe offers some multicast-only viewing options for some of the company meetings and things (usually as an alternative to the main connect feed).  If you're interested in an end-to-end solution that maximizes peer-to-peer adoption, please let me know.

  • MMS.CFG Encoding

    I was wondering how important the Encoding was for the mms.cfg configution file.  The Admin Guide recommends UTF-8 or UTF-16.  It has also been stated that the mms.cfg can be over-written and set to the default settings when Flash Player is uninstalled.  I have noticed that when this happens and there is an uninstall of a non MSI installed version of Flash Player (EXE) the mms.cfg file is found re-written in the ANSI encoding format and not UTF-8.

    I do not know why it is recommended/required to save the mms.cfg file in Unicode format; all the data are purely ASCII characters.
    So if you observed that the file is saved as ANSI by the MSI installer, and that the setting work, then I wouldn't worry about it.
    But it would be interesting to hear a comment from the Flash Player team.

  • Mms.cfg not working in Flash 9.0.115.0

    We deploy Flash Player 9.0.115.0 with mms.cfg (utf-8) with
    AutoUpdateDisable=1. Yet after installation if we check
    the Global Notifications Settings Panel on
    http://kb.adobe.com/support/documentation/en/flashplayer/help/settings_manager05.html
    the Notify me when an update to Adobe Flash Player is available is
    enabled.
    Does mms.cfg work with 9.0.115.0? Or should we use
    %appdata%\Macromedia\Flash
    Player\macromedia.com\support\flashplayer\sys\settings.sol?
    Thank you

    We deploy Flash Player 9.0.115.0 with mms.cfg (utf-8) with
    AutoUpdateDisable=1. Yet after installation if we check
    the Global Notifications Settings Panel on
    http://kb.adobe.com/support/documentation/en/flashplayer/help/settings_manager05.html
    the Notify me when an update to Adobe Flash Player is available is
    enabled.
    Does mms.cfg work with 9.0.115.0? Or should we use
    %appdata%\Macromedia\Flash
    Player\macromedia.com\support\flashplayer\sys\settings.sol?
    Thank you

Maybe you are looking for