Print to network printer from evil with protected mode enabled (whitelist is configured and printer unc added to CTrustedSites/cSilentPrint)

We are unable to print to a network printer using Adobe Reader with 'protected mode' active.  These problems occur when you try to use command line arguments to print to a printer that is not installed on the computer.  We are able to accomplish this task easily and protected offshore.

The journal entries are (where < < unc_path_to_printer > > is a path UNC to a real printer on our network and < < username > > is the windows user name):

[10:14 / 13:19:20] Adobe Reader Protected Mode logging initiated

[10:14 / 13:19:20] Find the custom policy file: C:\Program Files (x 86) \Adobe\Acrobat Reader DC\Reader\ProtectedModeWhitelistConfig.txt

[10:14 / 13:19:20] Adding a custom policy: FILES_ALLOW_ANY = C:\*

[10:14 / 13:19:20] Adding a custom policy: REG_ALLOW_ANY = HKEY_CURRENT_USER\Software\ *.

[10:14 / 13:19:20] Adding a custom policy: REG_ALLOW_ANY = HKEY_LOCAL_MACHINE *.

[10:14 / 13:19:21] Bad Info to printer: device: < < unc_path_to_printer > >, Port: (empty), pilot: (empty), data type: (empty)

[10:14 / 13:19:21] Bad Info to printer: device: < < unc_path_to_printer > >, Port: (empty), pilot: (empty), data type: (empty)

[10:14 / 13:19:21] Bad Info to printer: device: < < unc_path_to_printer > >, Port: (empty), pilot: (empty), DataType: RAW

[10:14 / 13:19:26] Invalid path: \AppData\Local\Adobe\Acrobat\DC\ \Device\HarddiskVolume2\Users\ < < user name > >

[10:14 / 13:19:26] Invalid path: \Device\HarddiskVolume2\Users\< < user name > >\AppData\Local\Adobe\Acrobat\DC\

[10:14 / 13:19:26] Invalid path: \Device\HarddiskVolume2\Users\< < user name > >\AppData\Local\Adobe\Acrobat\DC\

[10:14 / 13:29:50] Bad Info to printer: device: < < unc_path_to_printer > >, Port: (empty), pilot: (empty), data type: (empty)

[10:14 / 13:30:16] Exit code: 1

Command line: "C:\Program Files (x 86) \Adobe\Acrobat player DC\Reader\AcroRd32.exe" / s/t "C:\temp\tmp_201510141141420.pdf" "< < unc_path_to_printer > >" "RICOH Aficio SP 4100N PCL 6 '" < < port_for_unc_printer > >'.

OS: Windows 7

Version of Adobe Reader: DC

We have followed the documentation to configure protected mode and did the following:

  1. HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\DC\Privileged "bProtectedMode" = 1
    1. We can confirm that the protected mode is enabled in effect
  2. HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\DC\Privileged "tBrokerLogfilePath" = C:\Users\[user]\AppData\Local\Temp\AdbeReaderBroker.log
    1. We are able to see the journal, so it works fine
  3. HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown 'bUseWhitelistConfigFile' = 1
    1. We can confirm via the newspapers being read in the white list file: C:\Program Files (x 86) \Adobe\Acrobat Reader DC\Reader\ProtectedModeWhitelistConfig.txt
  4. HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\DC\TrustManager\cTrustsedSites\cSilentPrint 't1' = < < unc_path_to_printer > >

Our ProtectedModeWhitelistConfig.txt contains:

; Files section

FILES_ALLOW_ANY = C:\*

; Registry

REG_ALLOW_ANY = HKEY_CURRENT_USER\Software\ *.

REG_ALLOW_ANY = HKEY_LOCAL_MACHINE *.

We allow all files at the moment, once it's working us would limit it more far.

We allow the input reg for the moment to remove the following journal errors, which we do not understand:

[08:06 / 13: 52:21] NtCreateKey: STATUS_ACCESS_DENIED

[08:06 / 13: 52:21] real path: \REGISTRY\MACHINE\Software\Adobe

[08:06 / 13: 52:21] Consider changing the strategy using this policy rule: REG_ALLOW_ANY

[08:06 / 13: 52:21] NtCreateKey: STATUS_ACCESS_DENIED

[08:06 / 13: 52:21] real path: \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Adobe

[08:06 / 13: 52:21] Consider changing the strategy using this policy rule: REG_ALLOW_ANY

[08:06 / 13: 52.28] NtCreateKey: STATUS_ACCESS_DENIED

[08:06 / 13: 52.28] actual path: \REGISTRY\USER\S-1-5-21-3056327225-4203895344-2874801580-19977\Software\Adobe\Acrobat Reader\DC\AVGeneral\cRecentFiles

[08:06 / 13: 52.28] Consider changing the strategy using this policy rule: REG_ALLOW_ANY

[08:06 / 13: 52.28] NtCreateKey: STATUS_ACCESS_DENIED

[08:06 / 13: 52.28] actual path: \REGISTRY\USER\S-1-5-21-3056327225-4203895344-2874801580-19977\Software\Adobe\Acrobat Reader\DC\AVGeneral\cRecentFiles

[08:06 / 13: 52.28] Consider changing the strategy using this policy rule: REG_ALLOW_ANY

We would appreciate any comments on our Setup so far

Thank you!

Thanks for the details.

I'm afraid this doesn't seem to be something that's going to work. Protected Mode player won't allow printing to a printer that is already installed on the system. Your options are either:

1. install the printer before launching the player with this command line (perhaps install the printer through the same custom application that try to print the PDF file), GOLD,.

2 disable the Protected Mode

Sorry, that I couldn't be useful here.

Tags: Acrobat

Similar Questions

  • 2 (network) Officejet from HP in different places. Still, it disconnects and needs to be reinstalled?

    I have a HP Officejet Pro 8500 A190 (network) at work and at home (network) the Office one works fine with laptop vista 32 bit to every time an XP PC. Whenever I go home the vista laptop doesn't see the printer at home and saves it as being offline. All other computers on the home network see and well work with the printer. I need to remove and reinstall the printer whenever I come home.

    Suggestions for a fix?

    You will probably need to add the home as another printer.  First, go to control panel > printers and rename that to work at something like 8500-work «»  Then, when you're home you add at home:

    1. make sure the printer is on and connected to your network. Verify that you can access the printer's internal web page by accessing its IP address before continuing.
    2. click on > start > Control Panel > printers.
    3. click on add a printer
    4. Select local printer
    5. Select create a new port and select Standard TCP/IP Port, and click Next.
    6. under device type, select TCP/IP Device. Under the name of host or IP address, enter the IP address of the printer. Click Next.
    7. Select Hewlett-Packard in the list of manufacturers and select and select your printer model. Click Next.
    If your printer model is not in the list, then select disk provided, browse the CD that came with your HP printer and select the first file begins with hp and ending with INF. click Open, then OK. Select your printer model. Click Next.
    8. If prompted, use the driver that is currently installed.
    9. you will be asked the name of the printer - type one a name like '8500-House '. This will be the name of the printer that you select from other applications.
    10. we may ask you to share the printer. Choose No.
    11. the printing area of Test Page is displayed. Go ahead and print it out.
    12. click on finish.

  • Tablespace with a data file name in double and the directory added

    Version Oracle 11.1.0.7
    AIX platform

    I have exactly the same directory for the tablespace even a tablespace with 2 files with exactly the same name.

    I don't think it was possible for Oracle create two data files in the same directory with exactly the same data file for a tablespace name.

    The difference between the two seems to be the sizes - one is 10G, the other is 10 m autoextend on but with maximum size is equal to the size of create.

    It is not possible to table either both are full.

    Please notify.

    Thank you.

    You have a character that is hidden in the name of the file. Use ls for your operating system which shows the special characters (ls - lb or something, man ls).

  • Just installed CD player. Now I can't print pdf files without disabling Protected Mode.  Anyway to adjust/difficulty so I can print protected-mode?

    Just installed CD player. Now I can't print pdf files without disabling Protected Mode.  Anyway to adjust/difficulty so I can print protected-mode?

    Protected mode can be "a very important part of their security features", but what's the point if the product does not work?

    If has been like that since the introduction of Safe_mode in drive X.  Reader, crashes, hangs, cale, cannot print and various other symptoms.

    I recommended to disable Safe_mode for a very long time, and even Adobe support staff do often the same here in the forum.

    There is absolutely no advantage whatsoever to keep protected Mode enabled.  (Although I personally have never had no problems [with protected Mode on] on any of my Windows systems.)

  • Cannot open the Adobe reader protected mode due to incompatibility with your system configuration.

    Original title: trying to open a PDF file problems

    I use Windows 7 on a 32-bit computer with Firefox and Adobe Reader X 1.  Try to open a PDF with any application or attempt to open Adobe Reader via the icon programs, product now the following error message:

    «Adobe reader could not open protected mode due to incompatibility with the system configuration you.» Want to open Acrobat Reader with protected Mode off? "Answer either 'Yes' to this question produces:"Adobe could not load the DLL base. "

    On other occasions, trying to open the pdf file has directed me to an interface recommending me to open it with my Canon printer.  Try to change the default program used on a PDF file generates the above error messages previously.

    I reinstalled Adobe and who did it.  Clearly a problem for Adobe.  Regret not having tried that earlier, I thought that it couldn't be that simple.

  • Problem with the latest Adobe Reader 11.0.10 - Adobe Reader cannot open protected mode due to the incompatibility with your system configuration.

    Since the update to the most recent v11.0.10 of Adobe Reader, getting a Safe_mode Adobe Reader: Adobe Reader cannot open protected mode due make an incompatibility with your system configuration.  Want to open Adobe Reader with protected Mode off?

    The solution I was looking for was to launch Adobe Reader protected mode.

    I couldn't identify issues preventing start Protected Mode.  What ended up working, was complete, followed by a reinstall uninstall.  Now we can load drive in Protected Mode.

  • Protected mode ON / OFF

    HP Pavilion AMD

    Model # a6655F desktop PC

    X 4 image processor

    5 GB DDR2 SDRAM

    Vista Home Premium 64-bit

    Service Pack 1

    Version of MS Office Word 07 student

    AT & T Broadband

    AOL 9.1

    At the bottom of the window, I was working (I don't remember which, I would like to notice that he said Protected Mode ON. I was disconnected with my broadband for a few hours. When I'm reconnected me, I noticed, at the bottom of the window, he now says, Protected Mode OFF.

    Where and how can I turn ON protected computer Mode?

    It must always be turned?

    Sorry, I can't find the window has been displayed by this information.

    Hello

    This is a link to a web page that explains it. Personally, I turn off UAC and am not harassed with warnings. But it is my own choice.

    Kind regards

    Eric

    Published by erico on 16/01/2009 13:57

  • Turn on Protected Mode turns off in IE 8 after rebooting

    Every time I have start or restart my computer, and then open IE 8, I get a bar at the top of the screen that shows the protected mode is disabled.  I go to Tools - Internet Options - Security - Internet and the box in front of "The Enable Protected Mode (requires restarting Internet Explorer)" is unchecked.  I check the box and click on apply.  I then restart Internet Explorer and I have no other problem with protected Mode become invalid as long as I do not restart or shut down the computer.  What is going on?  How can I keep the Protected Mode?  Thank you!

    You have UAC active? You have a version of Vista with GPedit (group policies), parental control,
    or have a conflict of security configuration?

    Have you tried IE with no Addons?

    Start - All Programs - Accessories - System Tools - IE with no Addons.

    Perhaps restore and reset IE
    IE - Tools - Internet Options - Advanced tab - Restore Defaults - then RESET - APPLY - OK close and restart IE

    Could be antivirus software or security, what are you help and who were ALWAYS on the same if you machine
    uninstalled them?

    Ways to stop, of course the inverse would be WE
    http://www.mydigitallife.info/2007/05/26/ways-to-turn-off-and-disable-Vista-IE-7-protected-mode/

    Safe_mode of IE7 on Windows Vista - is it on or off?
    http://blogs.msdn.com/ie/archive/2007/04/04/protected-mode-for-IE7-in-Windows-Vista-is-it-on-or-off.aspx

    Understanding and working in Protected Mode, Internet Explorer
    http://msdn.Microsoft.com/en-us/library/bb250462 (vs.85) .aspx

    Reset security zones
    http://pcsupport.about.com/od/fixtheproblem/HT/ie7securitydef.htm

    Here's how to troubleshoot the Addons, BHO, and/or programs causing startup problems.

    Start - All Programs - Accessories - System Tools - IE with no Addons - what works best?

    IE - tools - manage Addons (for sure disable SSV2 if it is there, it is no longer necessary but Java always install
    "(and it causes problems - you never update Java to go back in and turn it off again)." Search for other possible problems.

    Windows Defender - tools - software explore - look for problems.

    Could be a free - BHOremover - BHO - standalone program, needs no installation, download and run
    http://securityxploded.com/bhoremover.php

    Startup programs
    http://www.Vistax64.com/tutorials/79612-startup-programs-enable-disable.html 
    Rob - bicycle - Mark Twain said it is good.

  • Protection mode change

    Hi all;

    It is a test case Just tried to change the protection mode (it has been good and also worked well)

    PRIMARY_DB_UNIQUE_NAME: MRC

    STANDBY_DB_UNIQUE_NAME: STBYCRMS

    Initially we set up physical standby like "MAX PERFORMANCE"

    I changed the mode of protection performance max for Max availability.

    DGMGRL > CHANGE the DATABASE "stbycrms" SET PROPERTY "LOGXPTMODE"="SYNCHRONIZE";

    ...

    DGMGRL > EDIT CONFIGURATION SET PROTECTION MODE YOU MAXAVAILABILITY;

    ...

    DGMGRL > see the configuration;

    Configuration - dgcrms

    Protection mode: MaxAvailability

    Databases:

    MRC - primary

    stbycrms - physical of the standby database

    Fast-Start Failover: DISABLED

    The configuration status:

    SUCCESS

    > > On the primary database

    SYS > display the parameter log_archive_dest_2.

    VALUE OF TYPE NAME

    ------------------------------------ ----------- ------------------------------

    string LOG_ARCHIVE_DEST_2 = "stby_crmsdb", delay service LGWR SYNC AFFIRM = optional compression 0 = disable max_failure = 0 max_connections = 1 reopen = 300

    db_unique_name = "stbycrms" net_timeout = 30, valid_for =(all_logfiles,primary_role)

    My question is, suppose I make the transition to digital,

    We need to execute commands of primary database also?

    DGMGRL > CHANGE the DATABASE "CRM" SET PROPERTY "LOGXPTMODE"="SYNCHRONIZE";

    DGMGRL > EDIT CONFIGURATION SET PROTECTION MODE YOU MAXAVAILABILITY;

    ...

    DB version: 11.2.0.1

    Her need to be in SYNC since his handshake. Since one end is SYNC across is the handshake ASYNC transfer cannot be done.

    Doc: provides https://docs.oracle.com/cd/E11882_01/server.112/e40771/dgmgrl.htm#DGBKR640 information

    Notes on use

    • Before using the EDIT CONFIGURATION command to set the protection mode is the MAXPROTECTION or MAXAVAILABILITY mode, make sure that at least a database out there has its LogXptMode database of property the value SYNC .

    It may be useful

    -Pavan Kumar N

  • Cannot install my printer/error message-unable to create the object print dell v505, that the printer is not compatible with a polcy enabled on your computer that blocks NT 4.0 drivers (1930)

    Original title: cannot install my printer error message

    I am trying to install my printer to dell v505 from the factory disc and get this error message: failed to create the object print dell v505 printer is not compatible with a polcy enabled on your computer that blocks NT 4.0 drivers (1930)

    Any help, need a lot.

    Hello

     
    1. what version of Windows are you using?
    2 did you the chnages in the computer before this problem?
     
    I would suggest trying the following methods and check.
     
    Method 1: Run the fix, install the printer and check
    Diagnose and automatically fix problems printing and printer
    http://support.Microsoft.com/mats/printing_problems/
     
    Method 2:
    Error message when you try to connect to a printer in Windows Vista: "the printer driver is not compatible with a policy enabled on your computer that blocks NT 4.0 drivers.
    http://support.Microsoft.com/kb/931719
    Method 3: Install the printer in a clean boot state.
    How to troubleshoot a problem by performing a clean boot in Windows Vista or in Windows 7.
    http://support.Microsoft.com/kb/929135
    Note: Please, go to step 7 of the Kb to maintain the computer to normal startup.
     
    You can download the latest driver for your printer from the link below.
    http://www.Dell.com/support/drivers/us/en/04
     
     
    You can also check:
    Printer driver is not Compatible if a policy is enabled on your computer.
    http://support.Microsoft.com/kb/282011
     
    Error message when you try to connect to a printer in Windows Vista: "the printer driver is not compatible with a policy enabled on your computer that blocks NT 4.0 drivers.
    http://support.Microsoft.com/kb/931719
  • WSD Print device device driver prevents computer from going into standby mode

    WSD Print device device driver prevents computer from going into standby mode

    This message indicates that the computer was unable to fall asleep by a device driver.

    Look for the drivers updated printer manufacturers website or run the Microsoft Fixit:

    http://support.Microsoft.com/GP/printing_problems

  • I have vista professional and I just added to a domain. I now want to share with a printer area, however,

    I have vista professional and I just added to a domain. I now want to share with a printer area, however, I can't find where to go to get the list of users on the domain. I've always used XP and it is very easy to see. Can someone help me.

    Hello

    I suggest you send the question in the TechNet forums and check if it helps:

    http://social.technet.Microsoft.com/forums/en-us/winserverprint

    It will be useful.

  • [Acrobat DC] Cannot print unless that uncheck "Enabled Protected Mode at Startup"

    We maintain a Web site where users can download PDFs generated by this site.

    There are users of statement that PDF files can be downloaded but wouldn't print after that. There will be a message box popup to inform users that they are unable to print. Uncheck "enabled Protected Mode at startup" in the Acrobat preferences enabled them to print again. The same users also said they cannot leave this box checked because other programs in their systems requires this checkbox.

    Can someone tell me that what are the possible causes that to happen in some machines and what is the alternative that uncheck this box. Personally, I was not able to simulate this issue, but it has been reported by several of our users.

    Hi Howie

    Can you please try update Adobe Acrobat Reader DC to the most recent version in the machines and try again?

    To do this, simply open Acrobat Reader DC, go to 'Help'-> ' Check for Updates '.

    Let us know if the problem reoccurs after that.

    Thank you

    Serge pacome

  • When I try to download a book from the public library on my Kōbō get the message this document is protected by rights managemsnt digital adobe and is not currently authorized for use with your adobe id. Please sign in with the adobe authorized one id

    When I try to download a book from the public library on my Kōbō get the message this document is protected by rights managemsnt digital adobe and is not currently authorized for use with your adobe id. Please connect with the authorized adobe id and try again. I signed in but still not working any help

    You have Digial Edition and allows your player with the same Adobe ID?

  • I have an epson printer p950 and try to print from lightroom. I get lines across the image and Epson tell me I need to contact you to find out how to slow printing

    I have an epson printer p950 and try to print from lightroom. I get lines across the image and Epson tell me I need to contact you to find out how to slow printing

    Suggest you to reset preferences in Lightroom and then, check out: to zero (or "Screw up") the preferences of Lightroom - Lightroom Forums file

Maybe you are looking for