ReaderX, WinXP SP3, Protected Mode for Admins

Hello,
We are having an issue running Reader X on Windows XP SP3 ***IF*** the Windows user is a member of the Local Admin group, it will not open in protected mode. **IF** the Windows user is a member of the local user group, Reader will open in protected mode. This happens whether we try to open PDF for just the application.
I reviewed the link provided with the Protected mode window, and the only item I could find that fit my situation was the fact that I had Symantec's Endpoint Protection (SEP) installed. We were at a lower version than was stated so we upgraded. That seemed to resolve it for a Windows User but not a Windows Admin.
I entered case with Symantec, but we determined it wasn't a Symantec issue, since after uninstalling SEP the error can be replicated.
Any comments or assistance would be greatly appreciated. Luckly 99% of our users belong to the Local Windows User group.
Is this working by design?
Thanks Amy

[ moved to the Enterprise Deployment forum ]

Similar Messages

How do I troubleshoot Flash Player's protected mode for Firefox?

Starting with Flash Player 11.3, a protected mode was added as a new security enhancement for Firefox 4.0 and greater on Windows Vista and higher. This security enhancement is designed to limit the impact of attacks launched from malicious Flash content (SWF files). For additional details on this feature, please see Inside Flash Player Protected Mode for Firefox
After reviewing this FAQ, we'd appreciate if you would take a minute to let us know if it helped. There is a link to a two question survey at the bottom of the page.
While we believe this feature is fully tested and reliable, if you encounter issues with Firefox we recommend the following troubleshooting steps.
Problem: Flash content does not appear, YouTube display errors such as "An error occurred. Please try again later.", or Flash video will not function properly.
Solution: If RealPlayer is installed on your system, please disable the RealPlayer Browser Record plug-in.
Launch RealPlayer
Click the RealPlayer icon in the upper left corner of the window and choose Preferences.
Choose Download & Recording from the left hand panel
Uncheck "Enable Web Download & Recording for these installed browsers"
Click OK and close RealPlayer
Restart Firefox
If you are viewing this page in Firefox and Flash Player is not working, please click here for an HTML5 version of this video: YouTube HTML5 HD Link
Problem: RealPlayer is not installed, Flash Player crashes in Firefox
Solution:
Troubleshoot Extensions and Add-Ons by launching Firefox in Safe Mode
1. Exit Firefox
2. Click Start > Run
3. Type the following then press [Enter]:
firefox.exe -p
4. Click Continue in Safe Mode
5. Attempt to reproduce the problem
If the problem does not occur in safe mode, please try to isolate it down to an individual plug-in.
1. Exit Firefox
2. Re-launch Firefox
3. Click Firefox > Add-Ons > Extensions
4. Click Disable on all of your extensions
5. Attempt to reproduce the problem, while enabling each extension until you can reproduce the issue
If the issue persists in Safe-Mode, please continue with the steps below:
Some users have indicated that random crashing stops when clearing their Firefox profile. This step will allow you to temporarily test with a clean set of Firefox preferences, without losing your preferences.
Exit Firefox
Click Start > Run
Type the following then press [Enter]: firefox.exe -p
Click Create Profile
Click Next
In the Enter new profile name dialog, type "Test"
Click Finish
Select Test and click Start Firefox
Use Firefox as normal. If the problem goes away, clearing your Firefox preferences, or migrating the important settings (bookmarks, etc) to a clean Profile may be a good permanent solution.
If the problem persists, switch back to your old profile by doing the following:
Exit Firefox
Click Start > Run
Type the following then press [enter]:firefox.exe –p
Choose your old account (typically "default")
Click Start Firefox
Solution: Try a clean Windows profile (You must be an Administrator to complete this step. If your user account is not an admin type, skip to the next section for instructions on reporting a bug.) Creating a new Windows user will rule out any account-specific preferences that may be enabled on your system.
Create a user account in Vista
Create a user account in Windows 7
Use Flash Player normally. If the problem goes away, this indicates a compatibility problem, either with software you have installed or with preferences set on your account.
Reporting a bug:
Please file bugs at bugbase.adobe.com.
Choose "Adobe Flash Player" as the product
Choose "Browser Integration" as the product area
Please provide as much information as possible with what you were doing before the crash and an exact URL where the crash occurred.
If available, please attach your Firefox crash logs to the bug using the Attachments field.
Show hidden files and folders. For more details, see the instructions for the operating system that you use: Vista and Windows 7.
Crash logs are located at C:\Users\username\AppData\Roaming\Mozilla\Firefox\Crash Reports\
Logs will be located in either the pending or submitted folder, depending on whether or not you submitted the crash report to Mozilla.
Last resort
Finally, if these problems are blocking you from using Flash Player we recommend, as a last resort, you either revert back to Flash Player 11.2 or temporarily disable Protected Mode. We strongly recommend that Protected Mode is manually enabled once this issue is resolved.
To revert to a previous version of Flash Player, please see this FAQ: How do I revert to a previous version of Flash Player?
To disable Protected Mode, add the following line to your mms.cfg file located in:
Windows 32bit: C:\windows\system32\macromed\flash
Windows 64bit: C:\windows\syswow64\macromed\flash
ProtectedMode=0
If the mms.cfg file does not exist, create one using any standard text editor (e.g.. notepad)
Depending on your operating system, you might need to first save the mms.cfg file to a writable location (such as your documents or desktop folder) and then copy the file into the destination folder using Windows Explorer.
To re-enable Protected Mode, simply remove the line from the mms.cfg file.
Hopefully this FAQ helped you. Please let us know by taking a minute to fill out this simple survey.
Did this FAQ help?

Please ask your question on a forum for the Flash Player

Work Protect Mode for IAC/BSP iViews

Does anyone know how I can enable Work Protect Mode for BSP or IAC iViews in the portal?
It works correctly as per the desired mode level for WDP iViews, but when a user makes changes on a form on a BSP/IAC and navigates away from the page, no pop-up appears.
Is some JavaScript required in the BSP to set the page as "dirty" or to subscribe to the Work Protect event handler in the portal, or is there a simpler way to enable this or a similar feature?
Thanks,
Tom

Hello friends,
I have same issue.. I have applied Work Protect Mode to 3.. but it doesn't work for IAC iViews.
Is your issue resolved by any mean..
I cant apply Java script code on every back-end application...
the issue again... is this doesn't come when user directly logs in through ITS. over there user gets the alert. but only when user moves from Portal the work protect mode doesn't.
It became very urgent issue.
I appreciate any help..
Regards
pankhuri

Choosing protection mode for Active dataguard

Hi Gurus,
I'm confused with Active dataguard configuration-What mode do i need to configure physical standby to make use of actice dataguard.I know i can even use maximum performance with standby redolog for real time query.But what is the minimum protection mode to run active dataguard.
How can i setup a delay of 1 hour for active dataguard in 11gr2?
Thanks

You said:
>
By default Dataguard is in Maximum performance mode..we can set delay of 1 hour by setting the
log_archive_dest_2="service=to_standby lgwr async affirm reopen=60"
or
log_archive_dest_2="service=to_standby lgwr async delay=60"
>
I am sorry, but your first log_archive_dest_2 value is not correct:
The combination of ASYNC & AFFIRM is not supported and not sensible; REOPEN=60 will not delay the Redo Apply
See here for a proper explanation of log_archive_dest_n:
http://download.oracle.com/docs/cd/E11882_01/server.112/e17110/initparams121.htm
Kind regards
Uwe Hesse
http://uhesse.wordpress.com

Work Protect Mode for transactional iView...

Hi Experts,
Please help me to understand significance and features of Work Protect mode in portal.
How to implement it.
But main point is, is it possible to implement Work Protect Mode in Transactional iViews, i.e. let say we have created one transactional iView for SU01 tcode, which opens in New Window.
Now if I directly close that window then ideally one popup should come telling the data is not saved.
Also let me know if there is any other way to achieve my requirement.
Appreciate for help.
Regards,
Ravi

Hi Ravi,
Thanks for your response.
Kindly suggest what vaue we should give in this property "workprotect.mode.default".
I was going through one link : [http://help.sap.com/saphelp_erp2004/helpdata/en/37/50fb5066f9db43b3b5d5fc8de0c051/content.htm]
Also are you sure this setting will enable WorkProtectMode for Transactional iView as well.
Regards,
Ravi

OT : Desable protected mode for OT (work order)

Hi ALL,
For OT , I cilck ctrl+F2 the OT (work order) become protected , how can I disable mode protected .
Best regards.

You can do it via a registry change; I don't know if you can use GPO or similar to achieve this.
For Reader 11 the entry is
[HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\11.0\Privileged]
"bProtectedMode"=dword:00000000
For Reader 10 the entry is
[HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\10.0\Privileged]
"bProtectedMode"=dword:00000000

Reader 10.1.1 Protected Mode

Hello
I am deploying Reader 10.1.1, but on some computers protected mode is blocking PDF files from being opened from a network drive. Is it possible to configure protected mode for a safe domain.
The solutions I have so far, disable protected mode, but this is refussed by my security manager, or copy the PDF files to a local drive from the network, but affected staff will not like this as a long term work around.
An guidance and info most welcome, the package has been created with Adobe customization wizard, and deployed with Microsoft Config manager.
Update 02/11/11 - I have been trawling the web about this problem, lots of people appear to have this issue, any idea if Adobe have a new release of Reader 10. to fix this issue.
Many thanks Jon
Very disappointed that no one from Adobe has responded to this post. I am now able to deploy Reader with no security, but miffed as this undermines all the work Adobe have put in to make this product more secure. Still it's only going to affect 1,900 computers.

Hi All,
We have had a few bug reports related to Adobe Reader X protected mode coming in from you in this forum. We have addressed a large number of them in our upcoming Reader update and we would like to hear your feedback.
To that extent, we would like to invite you to the Adobe Reader Prerelease program and try out the latest build. To participate, please fill in the form available at https://www.adobe.com/cfusion/mmform/index.cfm?name=reader_prerelease_ interest and indicate Adobe Reader as the product of your interest.
We look forward to your active participation, feedback and help towards making Reader a better product.
Thanks and regards,
Adobe Prerelease Team

When opening a PDF in IE 10 with Enhanced Protection Mode it displays "This website wants to run acropdf.dll"

I am running my application which requires JRE on Internet Explorer 10. Since the IE need to run in 64 bit mode, we have enabled the "Enhanced Protection Mode" in Security option of Internet Options in Advanced tab. But my application also opens
up PDF in the browser, when the page with PDF is invoked it displays "The webpage wants to run 'AcroPDF.dll'. If you trust this site, you can disable Enhanced Protection Mode for this site to run the control.(Disable)(Always Ignore)". And on
clicking any option the PDF is not displayed.
We would not be able to disable the Enhanced Protection Mode as the 64 Bit JRE would not be invoked for other part of the application.
Please let me know how to resolve this issue.
Regards
Navin

... and/or
Configure Adobe Reader to not use a Web Browser to open PDF documents... (see the Adobe.com for admx files to apply this setting by group policy) (
http://forums.adobe.com/thread/392489 )
Start>Adobe Reader>Edit>Preferences>Internet>uncheck "Display PDF in browser"
It seems that Adobe have recently changed the location of that setting in Adobe Reader (at least on 11.0.4). They've now hidden it under Edit > Accessibility > Setup Assistant > Then on page 5 of 5, there's a tick box to toggle 'Display PDF
documents in the Web Browser'.
However, it doesn't work like it used to though, as it won't just open a PDF in Adobe Reader instead of the browser. It will instead ask to disable Enhanced Protected Mode to run acroPDF.dll.
And if you try disabling the Adobe PDF reader add-on in Manage Add-ons to try and force it to open in Reader, then when you visit a PDF link, you just get the same blank page (shown below) with the black crossed out circle in the top left, but without the
message bar at the bottom of the window. The only way to open the PDF is to either turn off Enhanced Protected Mode and allow acroPDF.dll to run or if there's an original link to the PDF, right click and select 'save-as'.
I think it's about time Adobe released an x64 PDF viewer... Or at least there should be an open/save dialogue box in IE.
If you've got Reader 11.0.4 installed, you can try it for yourself with this PDF link:
http://helpx.adobe.com/pdf/adobe_reader_reference.pdf
(The below screenshot is with 'Display PDF documents in the Web Browser' UN-ticked in Adobe Reader settings, so it should open in Reader instead. But it doesn't. And with the Reader add-on disabled you get the same page, but without the
message at the bottom.)

Question about protection mode in Stdby env.

Hi,
In a standby environment, can we have primary database working in two protection mode simultaneously.
e.g. There are 2 standby databases for a primary database. One is situated in another city (Stdby_A) connected via a slow link and another is in the same data center connected via 1Gbps link (Stdby_B).
Can we have primary database working in Maximum Performance mode for 'Stdby_A; and in maximum protection mode for 'Stdby_B'.
Thanks
Amit.

thanks,
what could be the best possible solution in above scenario.
Regards,
Amit

Adobe Reader Performance with Protect Mode On

We are getting very poor performance in opening PDF documents with Adobe Reader XI with Protected Mode on, particularly for users remote from our central server. With Protected Mode off, performance is much better (10-20X faster opening). Note that we are running Windows 7 with Application Data Roaming and Adobe Reader XI with Protected Mode on, Protected View off, and Advanced Security on. We have diagnosed the problem as follows: We are using the Windows 7 Application Roaming Data feature to house some profile data for our remote users, and when they try to open a PDF document with Protected Mode on, Adobe sends numerous I/O packets (approximatel 6000!) across the "wire" for security checking against the Application Roaming data file on the central server, thus greatly slowing PDF opening. We would like to know the following: 1) Is there a way to turn-off Protected Mode for company server stored documents, while keeping it active for documents received from external sources (e.g. from the internet, e-mail, etc.). 2) is there a way to have Protect Mode security verification done only on the local machine profile data and not on the centrally stored Application Roaming Data file (thus greatly reducing the "across the wire" I/O traffic). Thanks for any help, CCB.

I don't think any of the scenarios you are envisaging are possible. Protected Mode is enabled/disabled on a user basis (in HKEY_USERS).

KMC didn´t work with pcd write-protect mode

Hello,
I have activated the write-protect mode for the PCD in our Portal. Everything is working fine.
After restarting the portal-server, the kmc-component didn´t work anymore. After disabling the write-protect mode and restarting the server, kmc works again.
I read a sap-note (1148777), that this problem was fixed with SPS 15 KMC-Patch 1. Our portal is on SPS 15 with latest patch-releases.
Any idea ?
Thx for your reply!
Oliver

The concurrent mark sweep collector you get with -Xincgc isn't a compacting collector. It doesn't move objects. So while it can grow the heap if needed, it can't give those pages back to the operating system, as you want by turning -XX:MaxHeapFreeRatio= down that far.

Adobe Reader XI, AppData Redirection & Protected Mode = Slow Performance

I'd really appreciate any useful information that might allow the use of protected mode, but with reasonably good performance in the following scenario:
Environment:
- Windows 7 desktops with Adobe Reader XI
- AppData is redirected to users' home folders
- Desktops (5 - 10 in most cases) across a ~10 Mbps MPLS link from server hosting fome folder and the PDF docs being accessed.
- Protected Mode Enabled (as recommended)
Symptom:
- It takes an inordinate amount of time (20 - 30 seconds) to open a tiny (100KB file) from a remote file server. By comparison an Excel spreadsheet of similar size opens in 2 - 3 Seconds.
Temporary Workarounds (either results in SUBSTANTIALLY better (and acceptable) performance):
- Disable Protected Mode (for obvious reasons, we'd like to have this feature enabled)
- Disable Appdata redirection (for many other reasons, Appdata redirection makes sense for our environment)
Other notes:
A network trace shows a large amount of SMB/CIFS traffic (5000 - 6000 packets) to/from the AppData folder when appdata is redirected to the users' home folders.
One thought I had was whether or not there is a means to direct an app to use AppData\Local instead of Appdata\Roaming, or if there is a means to direct Adobe reader to use an entirely different (and local to the OS) folder for whatever it needs appdata for when in protected Mode.
Any suggestions that don't include the workarounds already described are welcome. Thanks!

Protected Mode sounds like a good idea, but it causes so many different problems that even some Adobe support staff regularly recommend to disable it. I am sure that I myself have recommended that a couple of hundred times here in the Reader forum. Why have a security option that disables normal functions like opening documents or printing them...?

How do you disable Enhanced Protected Mode in the Metro/Modern version of IE11?

Hi All,
We need to try and disable Enhanced Protected Mode in the Metro/Modern version of IE11 as it's causing SSO problems with our proxy server (prompting for credentials).
I have already disabled EPM on the desktop version and SSO is now working, but only for the desktop IE.
It looks like turning of Protected Mode (for the Internet zone) resolves the issue on both the Metro and desktop IE versions but we'd obviously rather not do that!
any ideas?
Cheers,
G

I have already disabled EPM on the desktop version and SSO is now working, but only for the desktop IE.
Looking at the IECompatData.xml file suggests that there is some kind of override involving EPM but that would be specified on a host basis. Can "SSO" be expressed in terms of a set of host (or domain) names?
Robert Aldwinckle
Don's link points to this which may clarify (a bit?) what EPMCompatMode involves
http://blogs.msdn.com/b/ieinternals/archive/2012/03/23/understanding-ie10-enhanced-protected-mode-network-security-addons-cookies-metro-desktop.aspx
And here is the only hit that I have for that keyword
http://blogs.msdn.com/b/asiatech/archive/2013/12/25/how-internet-explorer-enhanced-protected-mode-epm-is-enabled-under-different-configurations.aspx

Windows XP SP3 & Adobe Reader X or XI protected mode

Using Windows XP Service Pack 3 and Adobe Reader X or XI our non-admin users receive the message "an internal error occurred." Assigning them admin rights allows them ot open the reader software so they can turn off protected mode then we can remove the admin rights and they will be able to open the reader software. Our new users are still not be able to open the reader and the ones that can are not protected. What do you suggest as a solution to this issue?

Hi,
Can you please let me know the following:
1) Are admin users able to open the PDF file with "Protected Mode " as "ON".
2) rights withy the non-admin users.
3) Locations/ folders from where PDF file cannot be opened or isa it happening for any location on the user's machine.
4) Is any special configuration involved like users are roaming standard users, Citrix users or are they simple domain standard users accessing a WinXP machine on the network.
5) Is the issue observed on Win7 as well (If possible to test, please verify)
6) Antivirus/ Encryption softwares installed on users machine.
Thanks,
Shakti K

Flash hangs IE as user/non admin with protected mode

Windows 2008 R2. IE 8
Versions of flash since 11.4 all exhibit this behavior.
Install as Admin on 2008r2 works fine.
Log on as user and flash hangs IE. The only way to get page to be functional is to disable protected mode or disable the shockwave plugin.
I have seen a few post with different issues. I have tried most recomedations except the beta 11.6
We cant load beta in our production enviroment and we cant disable proteced mode for our users.
Is there a way to tell which thread I should be participating in and sending debug reports to.
This happens in a Citrix Xenapp on Vmware ESX enviroment with 15 clean installed servers running on HP hardware. This also happens in RDP for these servers to rule out citrix. We also see this in Win 7 VDI machines,

This bug was causing the Flash player to delete the "broker" file upon exit in IE. Normally this isn't a problem, as an admin level account has permissions to recreate this file. That isn't the case with a normal user though. Our fix stops the deletion from occurring unless the broker is specifically a temporary version.
You might be able to work around this by running the script attached to this FAQ. I've heard at least one positive report that this helps. This script goes through and resets file, folder and registry permissions.
How do I fix Windows permission problems with Flash Player?

ReaderX, WinXP SP3, Protected Mode for Admins

Similar Messages

Maybe you are looking for