Push out Adober Reader changes to Macs

Question

I have a network with both Windows and Mac clients that use Adobe Reader.  I already know how to use Active Directory Group Policy to push the necessary registry changes so that my Windows based clients can have their Adobe Reader settings updated.
However, for my Mac users where the settings exist in .plist files, I have been searching for a way to centrally update these same settings (I'm interested in pushing out security related settings when Adobe releases security advisories saying that the mitigation is to ensure that certain settings are in place until a full blown patch is released).
Does anyone know how to push out .plist settings changes from a central point similar to what AD Group Policy allows with registry changes?
Thanks,
Brandon

Answer 1

I ran into this issue some time ago as well and wrote just such a script!
Here's an exerpt from my documentation:
Lastly we need to add the Printer via the command line. Here's how:
First thing we need to do is copy the PPD file to the correct location. By default it's in /Library/Printers/PPDs/Contents/Resources/
The PPD in question can be found specifically by typing lpinfo -m This lists all of the printer drivers available to cups.
You must copy the gz file using sudo. It needs to be copied to /usr/share/cups/model/
The copy command looks like this:
sudo cp /Library/Printers/PPDs/Contents/Resources/HP\ LaserJet\ P3010\ Series.gz /usr/share/cups/model/
Once there, you run the script to install it.
I've left the scripts in the Public/Techy Stuff for each printer we use in the highschool.
So, the command looks like this. It's a bit of a trick cause figuring out the details as to how it's supposed to work just by looking in the man pages usually *****.
I'll explain...  The command is as follows:
lpadmin -p LabLaser -E -v socket://192.168.1.11 -m HP\ LaserJet\ 1320\ Series.gz -o printer-is-shared=false
lpadmin -p LabLaser adds the printer and calls it "LabLaser"
-E forces encryption while connecting to the server. It's probably not necessary but it's in all the examples on the web that I could find.
-v gives you the opportunity to specify the location of the printer. In ***** case they're all network printers with valid IP addresses and MDNS addresses, so yeah. socket:// for standard IP printing protocol (IPP) mdns:// for bonjour.
Get the mdns name from lpinfo -m
...the -m specifies the name of the PPD. See above. (this is the driver that I copied to /usr/share/cups/model/)
-o is pretty self explanitory...  However I feels it's extremely important.  This will prevent the printer from showing up in the bonjour list of printers on the network even if the user has printer sharing turned on.
Hope this helps!
-Graham