Adobe Reader MSI - Why is it so difficult? How do you do it?

[Warwick_Tech]

So I'm getting mad at Adobe (again) as they do have an MSI for reader; but it installs a very old version (15 I think) and then does it's updates -

 

Using several sources I have made it to where I have an updated MSI -

https://community.spiceworks.com/t/how-to-deploy-acrobat-reader-with-gpo/1007665

 

And this works (hooray) but now It won't update manually (or automatically) and any special options I set in the customisation wizard like skipping the EULA fail to apply; Is this a case of making a new MSI for every reader update?

 

The reason this was all flagged was disabling Javascript by default inside Reader, as per a recent hack on a well known imageboard (whatever that is) - I've managed that, but now have tons of versions of reader all over the bloody place!

 

Grr.....

[simpsonj]

How many Endpoints? If it's under 200, you could look at Action1 to do the updating for you.

[Zoom7000]

Is there a reason why you can't use the EXE and pass the parameters to the packaged MSI - "/sAll"

[Warwick_Tech]

1 hour ago, simpsonj said:

How many Endpoints? If it's under 200, you could look at Action1 to do the updating for you.

 

Wholeschool unfortunately

 

1 minute ago, Zoom7000 said:

Is there a reason why you can't use the EXE and pass the parameters to the packaged MSI - "/sAll"

 

I could push it out via the EXE, but I like to use the old-fashioned MSI options in GPO to manage software versions etc. - maybe it's time to look at a scripted solution instead

 

 

[robyholmes]

I'm just (Like right now) testing Intune MS Store deployed version of it. But I'm also thinking of making it an optional installation. What does Adobe Reader now do that Edge / Chrome can't? Not a lot I suspect. (Other than try get you to purchase Adobe subscriptions...)

[ITGuyNW]

From PDQ it does this. Not sure how much it will help..

 

1. It kills any open Adobe readers using CMD %SYSTEMROOT%\System32\taskkill.exe /f /im AcroRd32.exe

 

2. It uninstalls all previous installations via a powershell script

 

$regPaths = @(
    'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall',
    'HKLM:\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall'
)

$displayName = @(
    'Adobe Acrobat Reader',
    'Adobe Acrobat Reader DC',
    'Adobe Acrobat Reader DC MUI',
    'Adobe Acrobat Reader MUI',
    'Adobe Acrobat Reader 2017',
    'Adobe Acrobat Reader 2017 MUI',
    'Adobe Acrobat Reader 2020',
    'Adobe Acrobat Reader 2020 MUI'
)
$publisher = 'Adobe Systems Incorporated'

$detectedInstalls = $null
$detectedInstalls = @(Get-ChildItem -Path $regPaths -ErrorAction SilentlyContinue -Force |
    Get-ItemProperty | Where-Object { ($displayName -eq $_.DisplayName) -and ($_.Publisher -eq $publisher) })

if ($detectedInstalls){
    Write-Output 'Installations found.'
    ForEach($installation in $detectedInstalls){
        Write-host 'Uninstalling: ' $installation.DisplayName $installation.DisplayVersion
        $guid = $installation.PSChildName
        Start-Process "msiexec.exe" -ArgumentList ('/qn','/norestart','/x',$guid) -Wait
    }
}
else{
    Write-Output 'No installations found.'
}

 

3. It then installs Adobe reader using the old version 15 and the command line below

 

AcroRdrDC1500720033_MUI.exe /sAll /rs /msi EULA_ACCEPT=YES AgreeToLicense=Yes RebootYesNo=No DISABLEDESKTOPSHORTCUT=1

 

4. It then applies a patch to this old version to bring it up to date.

 

 

The patches are available here

 

https://www.adobe.com/devnet-docs/acrobatetk/tools/ReleaseNotesDC/index.html

 

5. It then applies a bunch of reg fixes 

 

REG ADD "HKLM\SOFTWARE\WOW6432Node\Adobe\Adobe ARM\Legacy\Reader\{AC76BA86-7AD7-FFFF-7B44-AC0F074E4100}" /v Mode /t REG_DWORD /d 0 /f
REG ADD "HKLM\SOFTWARE\WOW6432Node\Adobe\Adobe ARM\Products\{291AA914-A987-4CE9-BD63-AC0A92D435E5}" /v Mode /t REG_DWORD /d 0 /f
REG ADD "HKLM\SOFTWARE\Wow6432Node\Adobe\Adobe ARM\1.0\ARM" /v iCheckReader /t REG_DWORD /d 0 /f
REG ADD "HKLM\SOFTWARE\Wow6432Node\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown" /v bUpdater /t REG_DWORD /d 0 /f
REG ADD "HKLM\SOFTWARE\Wow6432Node\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown" /v bAcroSuppressUpsell /t REG_DWORD /d 1 /f
REG ADD "HKLM\SOFTWARE\Wow6432Node\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown" /v bUsageMeasurement /t REG_DWORD /d 0 /f
REG ADD "HKLM\SOFTWARE\Wow6432Node\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cServices" /v bUpdater /t REG_DWORD /d 0 /f
REG ADD "HKLM\SOFTWARE\Wow6432Node\Adobe\Acrobat Reader\DC\Installer" /v ENABLE_CHROMEEXT /t REG_SZ /d 0 /f

[ITGuyNW]

1 hour ago, robyholmes said:

I'm just (Like right now) testing Intune MS Store deployed version of it. But I'm also thinking of making it an optional installation. What does Adobe Reader now do that Edge / Chrome can't? Not a lot I suspect. (Other than try get you to purchase Adobe subscriptions...)

We only have adobe installed for those that handle exam papers because some only open in Adobe. We tend to prefer Foxit if they absolutely want one.

[altecsole]

We use Configuration Manager, but the process if very similar to the PDQ one, listed above. We leave the auto-update option enabled so that it updates itself once installed.

 

I registered for a license from Adobe and got an email notification confirming, with a download link for the installer - https://get.adobe.com/reader/enterprise/

I downloaded the Windows 11 English (UK) version. This is an .exe file.

 

Extract the files

I used 7-Zip to extract the files. These include a setup.exe, along with AcroRead.msi, and an update patch .msp file.

There is also a setup.ini file that references the patch file.

 

Check for new patch files

You can check for the latest patch file at - https://www.adobe.com/devnet-docs/acrobatetk/tools/ReleaseNotesDC/index.html

1. Save the file to the same folder and delete the old one
2. Update setup.ini with the name of the new patch file and Save.
    

Generate a Transform file

Run the Acrobat Customization Wizard and load AcroRead.msi

1. Modify the installation as required and then choose Transform - Generate Transform to save the changes in a .mst file. I chose AcroRead.mst
2. Close the wizard without saving changes to AcroRead

 

Deployment

1. Create a standard Application in Config Manager
2. For installation command is:
   1. setup.exe /sAll /rs /msi TRANSFORMS="AcroRead.mst"
3. For detection, use file version, for example:
   

[StephenPink]

Old school but works - and means consistency across software deployments;

 

In order to package and deploy Acrobat Reader DC, the .exe that that is downloaded must first be extracted (using WinRAR/7zip) to its own folder.

 

The msi for the additional fonts is placed inside a "FontPack" folder.

 

"SilentInstall.cmd" file then created containing the below (note the msi must call the msp to install latest updates, which is why the exe cannot be used without extraction):

 

@ECHO OFF

COLOR 47

 

IF EXIST "C:\Windows\InstallFlags\AdobeAcrobatReaderDC-24.2.20965.0" EXIT

 

ECHO.

ECHO ======================================================

ECHO Installing Adobe Acrobat Reader DC v24.2.20965.0...

ECHO ======================================================

ECHO.

 

msiexec.exe /i "%~dp0AcroRdrDCx642400220965_MUI\AcroPro.msi" /update "%~dp0AcroRdrDCx642400220965_MUI\AcroRdrDCx64Upd2400220965_MUI.msp" /quiet /norestart

 

ECHO.

ECHO ======================================================

ECHO Adobe Acrobat Reader DC v24.2.20965.0 Installed

ECHO ======================================================

ECHO.

 

ECHO.

ECHO ======================================================

ECHO Installing Additional Fonts Pack...

ECHO ======================================================

ECHO.

 

msiexec.exe /i "%~dp0FontPack\AcroRdrALSDx64_2300820421_all_DC.msi" /quiet /norestart

 

ECHO.

ECHO ======================================================

ECHO Additional Fonts Pack Installed!

ECHO ======================================================

ECHO.

 

MD "C:\Windows\InstallFlags\AdobeAcrobatReaderDC-24.2.20965.0"

 

EXIT

[Sephiroth]

This was one of the big reasons I looked seriously at Chocolatey. I've got it now so that the latest version is installed whenever it's run without having to worry about what versions there are.

[thimon]

I only use PDQ Connect for software installs now, their agent is the only software I deploy via GPO. Their pre made Adobe package works fine. 

[Warwick_Tech]

Thanks all for your replies;

 

After working on this for a while it looks like there's a '64 bit unified app' that answers all these questions -

 

I'm going to play with this today....

 

https://www.adobe.com/devnet-docs/acrobatetk/tools/DesktopDeployment/singleinstaller.html

 

 

----------------

Edit:

 

Using the 'Pro' installer from here;

 

https://helpx.adobe.com/uk/acrobat/kb/download-64-bit-installer.html

 

So the command line

Setup.exe /sAll /slf /re /msi DISABLE_FIU_CHECK=1 TRANSITION_INSTALL_MODE=3

Works for others but not me; maybe my machine is different!

Edited April 23, 2025 by Warwick_Tech