Configuration Manager 2012 Compliance Baseline to Disable Adobe Air Automatic Updates

Posted: August 6, 2014 in System Center Configuration Manager 2012
Tags: , ,

This post is the first in a series of posts that will go over how to disable automatic updates for different applications using Compliance Settings in Configuration Manager 2012. By leveraging Compliance Settings in Configuration Manager 2012, we can easily track compliance and remediate installations that drifts from our baseline. In this series I’ll focus on how to disable automatic updates, but you could also track compliance and remediate other settings for applications if needed.

The reason we want to disable automatic updates for applications is to maintain control of what version of the applications the end-users are using. This also allows us to test new versions of applications and control when the end-users receives the new version. This off course means that you’ll have to have a routine in place for testing and deploying the new versions when they are released. I recommend using SCUP or package the new version as Applications/Packages in Configuration Manager, you could also leverage some third-party add-ons to assist you in this process like Shavlik Patch, Secunia, Solarwinds etc.

  1. Open the Configuraton Manager Console and Expand Assets and Compliance -> Compliance Settings -> Configuration Items and select “Create Configuration Item” from the ribbon.1
  2. In the Create Configuration item wizard fill out the Name, Description and assign an appropriate category and select Next.2
  3. On the Supported Platforms screen select any OS level you would like this CI to be evaluated against and select Next.3
  4. On the settings screen select New.4
  5. In the Create Settings screen supply a Name, Description, Set the Setting Type = “Script” and the Data Type = “String”.5
  6. Select Add Script under Discovery Script.
  7. In the Edit Discovery Script screen select Windows PowerShell and paste in the code at the end of this article and click OK.6
  8. Select Add Script under Remediation Script.
  9. In the Edit Remediation Script screen select Windows PowerShell and paste in the code at the end of this article and click OK.7
  10. Click on the Compliance Rules tab and select New.8
  11. On the Create Rule screen enter a Name, Description, set Compliant as the value, select Warning for the noncompliance severity for reports and ensure to check the box marked “Run the specified remediation script when this setting is noncompliant” and click OK.9
  12. Select OK to apply the settings.10
  13. Select Next on the Settings screen.11
  14. On the Compliance Rules screen select Next.12
  15. Select Next on the Summary screen.13
  16. Select Close on the Completion screen.14
  17. Select Configuration Baselines from the left pane and select “Create Configuration Baseline” from the ribbon.15
  18. Supply a Name, Description and assign an appropriate category for the Configuration Baseline.16
  19. Select Add -> Configuration Items to add Configuration Data to the Baseline.17
  20. Select the CI that was just created, then click Add and click OK.18
  21. Select OK to save your Configuration Baseline.19
  22. Right Click the newly create Baseline and select Deploy.20
  23. Select Remediate noncompliant rules when supported and configure your schedule to fit your needs.21
  24. Select Browse to choose your desired collection to deploy to.  Select Device Collections from the drop down menu and choose your desired collection and select OK.22
  25. Select OK to save changes.23
  26. On your client system you can see that the Baseline has been applied but has not evaluated yet.24
  27. Click Evaluate and you will now see that the Baseline is Compliant.25
<#
  Description: This script will check if automatic updates is disabled and return a 
               Compliant/Non-Compliant string.

  Created:     04.08.2014
  Version:     1.0
  Author:      Odd-Magne Kristoffersen
  Homepage:    https://sccmguru.wordpress.com/
    
  References:
  - Adobe AIR Administrator’s Guide 
    http://help.adobe.com/en_US/air/admin/air_admin_guide.pdf
#>

$Status = (Get-ItemProperty 'HKLM:\SOFTWARE\Policies\Adobe\AIR\').UpdateDisabled

if($Status -eq 1)
    {Write-Host 'Compliant'}
    else 
    {Write-Host 'Non-Compliant'}
<#
  Description: This script will disable automatic updates if it is enabled.

  Created:     04.08.2014
  Version:     1.0
  Author:      Odd-Magne Kristoffersen
  Homepage:    https://sccmguru.wordpress.com/
    
  References:
  - Adobe AIR Administrator’s Guide 
    http://help.adobe.com/en_US/air/admin/air_admin_guide.pdf
#>

Set-ItemProperty 'HKLM:\SOFTWARE\Policies\Adobe\AIR\' -Name UpdateDisabled -Value 1 -Force

You can also download the scripts here: Compliance Settings Scripts

Advertisements
Comments
  1. […] Configuration Manager 2012 Compliance Baseline to Disable Adobe Air Automatic Updates […]

    • Mark Hendrickson says:

      These Compliances/Remediations realy helped me. When I deploy this Configuration Manager 2012 Compliance Baseline to Disable Adobe Reader Automatic Updates I am getting Error: Script is not signed. Besides using a GPO to enable unsigned scripts, to run this, is there another way of getting this to run?
      Thanks,
      Mark

  2. […] Configuration Manager 2012 Compliance Baseline to Disable Adobe Air Automatic Updates […]

  3. […] Configuration Manager 2012 Compliance Baseline to Disable Adobe Air Automatic Updates […]

  4. […] Configuration Manager 2012 Compliance Baseline to Disable Adobe Air Automatic Updates […]

  5. […] Configuration Manager 2012 Compliance Baseline to Disable Adobe Air Automatic Updates […]

  6. […] Configuration Manager 2012 Compliance Baseline to Disable Adobe Air Automatic Updates […]

  7. […] Configuration Manager 2012 Compliance Baseline to Disable Adobe Air Automatic Updates […]

  8. […] Configuration Manager 2012 Compliance Baseline to Disable Adobe Air Automatic Updates […]

    • Mark Hendrickson says:

      Again, thank you so much for creating these Compliance/Remediation for Browsers. Any chance you have disable Internet Explorer Automatic Updates?

  9. […] Configuration Manager 2012 Compliance Baseline to Disable Adobe Air Automatic Updates […]

  10. […] Configuration Manager 2012 Compliance Baseline to Disable Adobe Air Automatic Updates […]

  11. […] Configuration Manager 2012 Compliance Baseline to Disable Adobe Air Automatic Updates […]

  12. […] Configuration Manager 2012 Compliance Baseline to Disable Adobe Air Automatic Updates […]

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s