Adobe Reader DC must disable the ability to change the Default Handler.
An XCCDF Rule
Description
Allowing user to make changes to an application case cause a security risk. When the Default PDF Handler is disabled, the end users will not be able to change the default PDF viewer.
- ID
- SV-213176r395850_rule
- Version
- ARDC-CN-000050
- Severity
- Low
- References
- Updated
Remediation Templates
A Manual Procedure
Configure the following registry value:
Registry Hive: HKEY_LOCAL_MACHINE
Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown
Value Name: bDisablePDFHandlerSwitching