Stop Foxit Reader trying to register (Alternatively: Automatic registration?)

[Garacesh]

So we're jumping ship from Adobe Acrobat Reader DC to Foxit PDF Reader because we're sick of staff not being able to edit PDF files and apparently exam boards are using PDF's more frequently.

 

However, whenever a user first launches Foxit, they are presented with a UAC prompt coming from "C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitReader.exe" -register

 

This will be no good because A) Most staff won't know to just cancel off it, and B) Student profiles are wiped every boot, so this will constantly show up for the kids.

 

I've already loaded the Foxit ADMX/ADML's into the DC and looked through their settings. There is a setting under Administrative Templates\Foxit Reader 8.3\Preferences reading Remove 'Registration' but that only removes registration from the Help menu once you're in the software, nothing to do with the registering at-launch.

 

I'd post on their forums but since it's currently housing some spam (1, 2) I'm not exactly enthused by the idea of signing up and posting.

Edited June 21, 2017 by Garacesh

[LeMarchand]

Have you had a poke through the registry to see if there's anything likely there? I found a key that sets Google Earth Pro credentials to stop a similar nag.

[Arthur]

So we're jumping ship from Adobe Acrobat Reader DC to Foxit PDF Reader

I assume since you mentioned ADMX you are using Foxit Enterprise Reader rather than the standard version meant for home users? Is that the case?

[3s-gtech]

Foxit can be set not to do this - it also has the ability to be customised pre-install so you can build your own MST for it. Via GP, we've turned off 'Advertisement', automatic update, the Start Page, Registration, and default checking (because...Windows 10).

 

Foxit Enterprise is no more - it's now Foxit Reader with Enterprise Packaging. Guess they wanted to consolidate two software branches. It works just the same though as FE though.

 

I should add - we ditched Adobe Reader/Acrobat back in 2008 (for Foxit). Never regretted it. Though Foxit has grown, it's still a fraction of the size and complexity of a product like DC.

Edited June 21, 2017 by 3s-gtech

[Garacesh]

I assume since you mentioned ADMX you are using Foxit Enterprise Reader rather than the standard version meant for home users? Is that the case?

Yes, with a question mark?

Foxit Enterprise is no more - it's now Foxit Reader with Enterprise Packaging. Guess they wanted to consolidate two software branches. It works just the same though as FE though.

Filled out the Foxit Reader for Enterprise form and got the msi and ADM/ADMX/ADML files.

 

Foxit can be set not to do this - it also has the ability to be customised pre-install so you can build your own MST for it. Via GP, we've turned off 'Advertisement', automatic update, the Start Page, Registration, and default checking (because...Windows 10).

Yeah, I've disabled Advertisement, Automatic Update, Start Page and Registration via GPO. But as mentioned, turning off Registration via GP only gets rid of the option from the Help menu. It doesn't appear to be stopping Foxit from running the .exe file with the -register switch (and I've checked the shortcut, the shortcut definitely isn't using the switch, it's just a vanilla link to the exe)

Edited June 21, 2017 by Garacesh

[3s-gtech]

That policy is supposed to also stop the popup dialog for registration - I suspect something has gone awry. We don't see it here (version 8.3).

[Garacesh]

That policy is supposed to also stop the popup dialog for registration - I suspect something has gone awry. We don't see it here (version 8.3).

 

To clarify: The issue I'm complaining about isn't directly from within the Foxit application itself, it's the typical "Do you want to allow this app to make changes to your device?" elevated credential prompt from UAC. However, Foxit does launch before this prompt appears. If I login as my admin account and run Foxit, the same UAC prompt appears just with Yes/No. If I click Yes, then login with a new Staff (Non-admin) account, the prompt still appears for that account.

 

GPResult is definitely saying the policy is being applied.

Are you applying by Computer or by User?

[3s-gtech]

I apply it by user.

[Garacesh]

I apply it by user.

 

Nope, no dice. I've applied the policy in Users and still get the credential prompt on first launch.

 

The Computer policy states: Enable this option to forbid 'Registration' dialog and remove 'Registration' item from 'Help' tab.

The User policy states: Enable this option to forbid 'Registration' dialog and remove 'Registration' item from 'Help' tab.

So I figured they were the same and applied the Computer policies, that way I could keep it bundled in the same GPO as the .msi installer. Keep it neat. But even from User, nothin'.

[3s-gtech]

I'm wondering if it's one of the add-ons that's wanting to make changes. We install it stripped right back - no Shell Extensions, no PDF Creator, no ConnectedPDF. Could be that one of those is bringing up the prompt? We can still edit PDFs by annotating them, but of course if you need any of those features it may not help!

[Garacesh]

I had the same thought. I Enabled 'Remove Plugins' and ticked 'Updater' and 'LicenseManager' when I was first setting it up, but have since ticked everything else in the list and it still throws the prompt

Edit: And it's not 'Forbid Checking of Default PDF Viewer' either. I thought maybe the process/switch might be ambiguously named ('register foxit as default viewer' or something) but nope..

Edited June 22, 2017 by Garacesh

[3s-gtech]

I just got it when I opened my copy on Windows 10 - it's ConnectedPDF that's bringing up UAC for me (that machine doesn't have the customised installer on it). Now removed that and tried again, no UAC prompt. Check that ConnectedPDF is gone (it's under the PDF Viewer group).

[Garacesh]

(that machine doesn't have the customised installer on it)

 

I don't know what customised installer you're talking about. When I filled out the Enterprise form I wasn't given a way to customise the install, I was just given an MSI and the ADM/AMXL/ADMX files. Are you saying I should have been given a way to customise my Foxit install? Or are you talking about options you're presented with when doing an interactive install?

 

Edit: Also, 'Disable ConnectedPDF Features' was Enabled via Group Policy for Computer settings. I've just put it in for User settings too. We'll see if that makes a difference.

Edited June 22, 2017 by Garacesh

[3s-gtech]

I used an MST generated by a tool Foxit provide to customise my install, otherwise you just end up installing the complete un-customised software. You can check by using the Change option from Programs. Remove ConnectedPDF and try again.

[Arthur]

When I filled out the Enterprise form I wasn't given a way to customize the install

There's a link further down that page for the customization tool.

 

http://cdn01.foxitsoftware.com/pub/foxit/reader/desktop/win/8.x/8.3/en_us/FoxitCustomizationTool.zip

 

Edited June 22, 2017 by Arthur

[Garacesh]

There's a link further down that page for the customization tool.

 

http://cdn01.foxitsoftware.com/pub/foxit/reader/desktop/win/8.x/8.3/en_us/FoxitCustomizationTool.zip

 

There is?

On this page? I ain't seeing it.

Well, that's my MST created. I'll let that push out and see if it's worked tomorrow.

[3s-gtech]

Remember it won't alter existing installs, just control new ones. You'd need to remove existing installs then re-install using the MST. You can also use Orca to modify the MSI itself (which I've done with success on Foxit before).

[Arthur]

There is?

Yeah. On the "Thank you" page with all of the links.

 

[MatthewL]

Is regmon still available, see what key it changes and then add it in to your GPO to apply that registry fix so when its launched it will think its already happened.

[Garacesh]

Well, that's my MST created. I'll let that push out and see if it's worked tomorrow.

Nada. Even pushing it out via 'Advanced' rather than 'Assigned' and specifying the .mst, still getting that UAC prompt >.<

 

You can also use Orca to modify the MSI itself (which I've done with success on Foxit before).

I'll give Orca a try then.

[3s-gtech]

When you do, make sure you go to Tools, Options, Database, select Copy embedded streams during 'Save As'.

 

You'll need to look at the settings under 'Checkbox' and Component/NoConnectedPDF=1

[Garacesh]

When you do, make sure you go to Tools, Options, Database, select Copy embedded streams during 'Save As'.

Done, thanks.

 

You'll need to look at the settings under 'Checkbox' and Component/NoConnectedPDF=1

CPDF_DISABLE_B and CPDF_DISABLE are already set as 1?

Also NoConnectedPDF doesn't exist in Component. Yes it does, but sording by Component doesn't sort them all alphabetically. So that's nice.

Looks like they've rewritten how the installer works! Time to dig through and see what I find..

[Garacesh]

The plot thickens: This installation package could not be opened. Verify that the package exists and that you can access it, or contact the application vendor to verify that this is a valid Windows Installer package.

 

I think I dun goof'd somewhere.

[Arthur]

The plot thickens: This installation package could not be opened. Verify that the package exists and that you can access it, or contact the application vendor to verify that this is a valid Windows Installer package.

Corrupt download?

 

[b]File[/b]: FoxitReader83_enu_Setup.msi
[b]Size[/b]: 119 MB (125,612,032 bytes)
[b]SHA-1[/b]: e7b8c96fdca0c7bb4bc7002b378cc905fe91b1c1
[b]SHA-256[/b]: dbe0d6f0ef00beaf174ab73f2f52fdb7b0b1b01564a448e44e15cd719cc1a5df
[b]SHA-512[/b]: 7606cb8bd49d8fc552cea80a5680c28bc50515c098e8a5024281a83c70d6092d605ed02f4001d7ea3c6adc47bda1c7207e4806844233d695f8e2e9ed53b4f25e

[Garacesh]

Corrupt download?

 

Vanilla MSI works fine. It's the one created with Orca that's the issue