Protect Mode with APP-M

Hello,
I have a problem with Adobe Reader XI Protect Mode.
When we open a PDF document through the APP-V layer I have an Access Dennied:
Look the LOG:
[12:11/13:40:07] NtCreateFile: STATUS_ACCESS_DENIED
[12:11/13:40:07] real path: \??\mailslot\Lilo17
[12:11/13:40:07] Envisagez de modifier la stratégie à l'aide de ces règles de stratégie : FILES_ALLOW_ANY ou FILES_ALLOW_DIR_ANY
[12:11/13:40:07] NtCreateFile: STATUS_ACCESS_DENIED
[12:11/13:40:07] real path: \??\mailslot\Lilo18
[12:11/13:40:07] Envisagez de modifier la stratégie à l'aide de ces règles de stratégie : FILES_ALLOW_ANY ou FILES_ALLOW_DIR_ANY
I can't disable protected mode.
Adobe Reader 11.0.3.37
AMG Version 4.28.134
CoolType Version 5.11.132
Thank you for your help
Menetrieux Florian

Solution : Open OSD file and modify the part "Policies"
<POLICIES>
<LOCAL_INTERACTION_ALLOWED>TRUE</LOCAL_INTERACTION_ALLOWED>
<VIRTUAL_FILE_SYSTEM_PASS_THROUGH>TRUE</VIRTUAL_FILE_SYSTEM_PASS_THROUGH>
<VIRTUAL_REGISTRY_PASS_THROUGH>TRUE</VIRTUAL_REGISTRY_PASS_THROUGH>
<ENFORCE_ACLS_ON_VREG_MODIFY>TRUE</ENFORCE_ACLS_ON_VREG_MODIFY>
</POLICIES>

Similar Messages

Disable Enhanced Protected Mode with IEAK, IE 11

Hello,
Enhanced protection mode is breaking Java. We build IE 11 packages with the IEAK, and I can't seem to find the setting in the IEAK to disable enhanced mode. Anyone have a solution?
Thanks

Hi,
To add, we could modify this Group policy preference to change EPM settings:
Computer Configuration > Administrative Templates > Windows Components > Internet Explorer > Internet Control Panel > Advanced Page
Here you will find the preference "Turn on Enhanced Protected Mode". Double-click it to open its configuration page and select one of the following values for it:
Not configured means that individual users can turn the feature on or off individually and without restrictions.
Enabled means that it is turned on for all user accounts and that it cannot be turned off, not even by admins.
Disabled means that it is turned off or disabled for all user accounts, and that it cannot be enabled by users, not even admins
In addition, here is an update available to disable EPM by default, more information, please check here:
An update is available that disables Enhanced Protected Mode by default in Internet Explorer 11
Hope this may help
Best regards
Michael Shao
TechNet Community Support

Work Protect Mode with BSP in EP 6.0 SP14

Hi,
we need to create a BSP application that runs in a EP portal. We have many BSP pages in this application, each requiring a lot of user input.
It would be really helpful to send a reminder to the user once he leaves a page and clicks another entry in the portal menu.
We understand that the "work protect mode" does this trick in NW2004s under certain circumstances (i.e. "dirty flag").
Is there any chance to build this behaviour also in the combination of a ABAP AS 6.40 (for the BSPs)with an EP 6.0 ?
We would appreciate any help on this topic.
Regards
Marcus

Hi,
Does that drop down list change results in a reload of the page with new data on? If so, you should set the variable for confirm to exit after the reload.
If there is no reload involved, the msg shouldn't show up. If lots of pages with drop down which work like this.
Eddy
PS.
Put yourself on the SDN world map (http://sdn.idizaai.be/sdn_world/sdn_world.html) and earn 25 points.
Spread the wor(l)d!

Cannot run reader in protected mode with MS Office 2010

I just set up 6 identical Dell Optiplex XE machines with Office Home and Business 2010 pre-loaded. Reader 10.1.1 will run in protected mode if it is installed before I go through the Office 2010 activation/installation procedure. On the 2 machines where Office was set up before installing Adobe reader, protected mode will not work. If protected mode is not enabled, I cannot go into preferences - general and turn the protected mode log to try to debug this problem. For now I an running those two machines with protected mode off. Has anyone else seen this?

You should always use official documentation for support details but I am pretty sure Windows 7 support was not available for the EAS client until 11.1.1.3.
http://www.oracle.com/technetwork/middleware/bi-foundation/hyperion-supported-platforms-085957.html

Maximum Protection mode with multiple guaranteed Standby destinations

Hello,
We have the requirement to have our database in 3 locations, so we have 1 primary and 2 standbys. High Availbility is not that important as data protection.
With maximum protection it's possible to guarantee the data replication to 1 standby database. If no standby is available the database stalls.
Our requirement is, that the data must be replicated to 2 standby databases. If this is not possible because of a network outage or server crash on a standby db, the primary should stall.
I know with this setup, the availablity will be lowered, but would it be possible to do this with dataguard? (RAC is not an option)
Thanks and Regards
Thomas

Hello again;
OK, I understand now. That sounds like a custom job. I'm not aware of a parameter which controls that number.
You could comb Chapter 8 of the "Oracle Data Guard 11g handbook", but I'm not finding anything there.
I believe the SYNC part of this ( Maximum Protection ) may have you covered, but if you had multiple standby's I still don't have a setting like you want.
Oracle Maximum Availability Architecture White Papers which may provide additional information :
Rapid Oracle RAC Standby Deployment: Oracle Database 11g Release 2
Switchover and Failover Best Practices
Client Failover Best Practices for Highly Available Oracle Databases
Oracle Data Guard with Oracle Database 11g Release 2
Best Regards
mseberg
Edited by: mseberg on Mar 15, 2012 9:04 AM

Issue with latest Adobe Reader 11.0.10 - Adobe Reader cannot open in Protected Mode due to incompatibility with your system configuration.

Since updating to the most recent Adobe Reader v11.0.10, getting an Adobe Reader Protected Mode: Adobe Reader cannot open in Protected Mode due do an incompatibility with your system configuration. Would you like to open Adobe Reader with Protected Mode disabled?

The solution I was looking for was to launch Adobe Reader in Protected Mode.
I could not identify issues preventing Protected Mode from starting. What ended up working, was to do a complete uninstall, followed by a reinstall. Now we can load Reader in Protected Mode.

How to make 32-bit-only add-ons work with Windows 7, Internet Explorer 11 and Enhanced Protected Mode enabled?

Hi everybody,
in IE10 I had the chance to use 32-bit-tabs even with EPM. In IE11 my 32-bit add-ons are all marked as "incompatible".
Do you have any suggestions?
Regards, Don

Hi Don,
The ”Enhanced Protected Mode ” feature of Internet Explorer 11 in Windows 7 has been simplified and it doesn`t provide the “Enable 64-bit processes for Enhanced Protected Mode” feature. The Enhanced Protected Mode is based on the 64 bit process.
So that may be the reason.
Here is a link for reference of Enhanced Protected Mode :
Enhanced Protected Mode
http://blogs.msdn.com/b/ie/archive/2012/03/14/enhanced-protected-mode.aspx
Here is another link for reference(Pay attention Windows 7 part in the end) :
How Internet Explorer Enhanced Protected Mode (EPM) is enabled under different configurations
http://blogs.msdn.com/b/asiatech/archive/2013/12/25/how-internet-explorer-enhanced-protected-mode-epm-is-enabled-under-different-configurations.aspx
Best regards

Adobe Reader cannot open in Protected Mode due to a problem with your system configuration.

From Adobe website: "Note that this list is not regularly maintained as Protected Mode now runs transparently in the background and it is unlikely that users will experience issues."
This explanation on the Adobe website does not explain what the problem is with the "system configuration". What is the system configuration problem?

Hi Steve,
As mentioned on the troubleshooting page as well normally application like antiviruses, encryption and system maintenance tools causes this kind of problem. These software software intercepts some system calls for the Reader sandbox. Could you please check if you have any of these kind of software installed? Could you please answer following question then I would be in better position to help you?
1. Version of Reader being used
2. OS
3. What happens if you choose launch unprotected? Do you see a failure or Reader launches?
Thanks

Unable to launch Adobe Reader using ShellExecute with Protected Mode on

HI
Using the latest Adobe Reader 11.0.9, I open a PDF via ShellExecute in a legacy 32bit application, I get an unsupported configuration dialog and prompt to open with Protected Mode disabled always, once or don't open.
I need it to open with Protected Mode enabled.
The folder is in the Security (Enhanced) Privileged Locations.
I turned Protected Mode logging on and I see these messages when I call ShellExecute:
[12:02/18:17:12] interceptions setup failed - error:0x0
[12:02/18:17:12] Failed to add target - error:0x0
[12:02/18:17:12] Failed to launch sandbox process. ResultCode: 1 error:0x5A4
[12:02/18:17:12] Sandbox Process Initialization Failed - error:0x5A4
I've read the Unsupported Configurations section of the Protected Mode Troubleshooting guide but nothing matches my system as far as I can tell.
I am running the 32bit legacy application in Windows Server 2008 R2 (64bit) as a member of Domain Administrators
What can you suggest is the unsupported configuration?
Thanks
Craig

I've tried another PDF viewer and it works fine so I think it's time to say goodbye to Adobe Reader.

When opening a PDF in IE 10 with Enhanced Protection Mode it displays "This website wants to run acropdf.dll"

I am running my application which requires JRE on Internet Explorer 10. Since the IE need to run in 64 bit mode, we have enabled the "Enhanced Protection Mode" in Security option of Internet Options in Advanced tab. But my application also opens
up PDF in the browser, when the page with PDF is invoked it displays "The webpage wants to run 'AcroPDF.dll'. If you trust this site, you can disable Enhanced Protection Mode for this site to run the control.(Disable)(Always Ignore)". And on
clicking any option the PDF is not displayed.
We would not be able to disable the Enhanced Protection Mode as the 64 Bit JRE would not be invoked for other part of the application.
Please let me know how to resolve this issue.
Regards
Navin

... and/or
Configure Adobe Reader to not use a Web Browser to open PDF documents... (see the Adobe.com for admx files to apply this setting by group policy) (
http://forums.adobe.com/thread/392489 )
Start>Adobe Reader>Edit>Preferences>Internet>uncheck "Display PDF in browser"
It seems that Adobe have recently changed the location of that setting in Adobe Reader (at least on 11.0.4). They've now hidden it under Edit > Accessibility > Setup Assistant > Then on page 5 of 5, there's a tick box to toggle 'Display PDF
documents in the Web Browser'.
However, it doesn't work like it used to though, as it won't just open a PDF in Adobe Reader instead of the browser. It will instead ask to disable Enhanced Protected Mode to run acroPDF.dll.
And if you try disabling the Adobe PDF reader add-on in Manage Add-ons to try and force it to open in Reader, then when you visit a PDF link, you just get the same blank page (shown below) with the black crossed out circle in the top left, but without the
message bar at the bottom of the window. The only way to open the PDF is to either turn off Enhanced Protected Mode and allow acroPDF.dll to run or if there's an original link to the PDF, right click and select 'save-as'.
I think it's about time Adobe released an x64 PDF viewer... Or at least there should be an open/save dialogue box in IE.
If you've got Reader 11.0.4 installed, you can try it for yourself with this PDF link:
http://helpx.adobe.com/pdf/adobe_reader_reference.pdf
(The below screenshot is with 'Display PDF documents in the Web Browser' UN-ticked in Adobe Reader settings, so it should open in Reader instead. But it doesn't. And with the Reader add-on disabled you get the same page, but without the
message at the bottom.)

Reader X crashes after 30 secs with Protected mode enabled

Having just deployed Reader X to over 100 PC's via group policy I'm a little dishartened to find that Reader X crashes after 30 secs of being open when protected mode is enabled.
Current setup is as followed:-
Clients are XP SP3, Vista SP2 & Win7 (all crash)
Server 2003 R2 domain
Reader X deployed via MSI using GPO with a transform created using the Reader X customization wizard (only set to disable updates as I'll push these out via GPO also when available).
The problem occurs with standard domain users (doesn't happen if you use an admin account to login and run Reader X), once you disable the setting for "enable Protected mode at start up" and restart Reader X it doesn't crash. I've been reading also that the protected mode creats a sandbox environment that some AV products are currently having issues with, so I've also tested by removing my AV on a test client rebooting and running Reader X with protected mode enabled, the Pc will still crash, so that rules out my AV product.
After each crash the client logs an event in the application log
Event ID: 1000
Aource Application error
Description:
Faulting application AcroRd32.exe, version 10.0.0.396, time stamp 0x4cc5e97b, faulting module WININET.dll, version 8.0.6001.18999, time stamp 0x4ccfa98f, exception code 0xc0000005, fault offset 0x0002387b, process id 0xd54, application start time 0x01cbc2ec89ab4cba.
Anyone any ideas on why this happens?

I am seeing the same problem on Vista SP2 32-bit. I enabled the Protect Mode log and see a bunch of errors relating to registry entries. I am running Adobe Reader X 10.0.1 as a standard privilege user. The problem has been intermittent. Repeated attempts to open the same PDF will result in Adobe Reader X failing after 45 seconds, then the next attempt will work fine. I have had situations where an Adobe Reader X instance has been open for hours but a new instance crashed. I have not been able to identify any trigger that might explain the difference in behavior. The problem has gone away since disabling Protect Mode.
>>>
[05:31/19:10:43] Adobe Reader Protected Mode Logging Initiated
[05:31/19:10:43] NtCreateKey: STATUS_ACCESS_DENIED
[05:31/19:10:43] real path: \REGISTRY\MACHINE\Software\Adobe
[05:31/19:10:43] Consider modifying policy using this policy rule: REG_ALLOW_ANY
[05:31/19:10:43] NtCreateKey: STATUS_ACCESS_DENIED
[05:31/19:10:43] real path: \REGISTRY\MACHINE\SOFTWARE\Adobe
[05:31/19:10:43] Consider modifying policy using this policy rule: REG_ALLOW_ANY
[05:31/19:10:44] OpenEvent: STATUS_ACCESS_DENIED
[05:31/19:10:44] name: MSFT.VSA.COM.DISABLE.5900
[05:31/19:10:44] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY
[05:31/19:10:44] OpenEvent: STATUS_ACCESS_DENIED
[05:31/19:10:44] name: MSFT.VSA.IEC.STATUS.6c736db0
[05:31/19:10:44] Consider modifying policy using these policy rules: EVENTS_ALLOW_ANY

Flash hangs IE as user/non admin with protected mode

Windows 2008 R2. IE 8
Versions of flash since 11.4 all exhibit this behavior.
Install as Admin on 2008r2 works fine.
Log on as user and flash hangs IE. The only way to get page to be functional is to disable protected mode or disable the shockwave plugin.
I have seen a few post with different issues. I have tried most recomedations except the beta 11.6
We cant load beta in our production enviroment and we cant disable proteced mode for our users.
Is there a way to tell which thread I should be participating in and sending debug reports to.
This happens in a Citrix Xenapp on Vmware ESX enviroment with 15 clean installed servers running on HP hardware. This also happens in RDP for these servers to rule out citrix. We also see this in Win 7 VDI machines,

This bug was causing the Flash player to delete the "broker" file upon exit in IE. Normally this isn't a problem, as an admin level account has permissions to recreate this file. That isn't the case with a normal user though. Our fix stops the deletion from occurring unless the broker is specifically a temporary version.
You might be able to work around this by running the script attached to this FAQ. I've heard at least one positive report that this helps. This script goes through and resets file, folder and registry permissions.
How do I fix Windows permission problems with Flash Player?

Saving with protected mode enabled

Hi,
Can anyone tell me how to configure protected mode so we can save pdf files with it enabled? Right now if you try to save a pdf it gives you an error saying something about the disk being full and it won't save it. I found the information on configuring a white list but i'm not real sure exactly what I need to put in it to allow us to save.
Thanks!

Ok, I understand.
It seems there it's a bug in the spanish translation of Reader, because in the Enhaced Security zone it says protected mode instead of protected view on the three radios (All files, files from potentially unsafe .., Off)
Check this image:
I will look where to send this bug to Adobe.
Regards,

Adobe reader cannot open in protected mode due to an incompatibility with your system configuration.

I keep getting the error message: Adobe reader cannot open in protected mode due to an incompatibility with your system configuration.
I have Windows 7 Home basic Service pack 1 and have already uninstalled and re-downloaded Adobe reader XI twice. I have also read other threads on this forum, and
tried the suggestions, including running Kaspersky anti-rootkit, no threats were found.
My Adobe reader shortcut icon shows a small blue and yellow shield in the bottom right (I uninstalled Windows essential protection), but the problem prevails.
I would rather get to the root of the error and fix it and not just disable protection mode!
Please help.

Hi,
Please refer to the solution in:- Error: “Acrobat Failed to Load core DLL”.
Also, may want to try disabling all Non-Microsoft Startup Services.
Ref : http://helpx.adobe.com/x-productkb/global/disable-startup-items-services-windows.html
Regards,
Nakul

Adobe reader 11 cannot open in protected mode due to incompatibilty with your system configuration

I have deployed Adobe reader 11 is our IT Enviorment using SCCM 2012 and the following warning Adobe reader cannot open in protected mode due to incompatibilty with your system configuration. Would you like to open Adobe reader with Protected Mode disabled is being displayed. When tried opening PDF files. Is there any way to isolate the cause without needing to disable the protected mode without needing to disable protected mode from Adobe reader settings.

To the best of my knowledge: no.

Protect Mode with APP-M

Similar Messages

Maybe you are looking for