[prev in list] [next in list] [prev in thread] [next in thread]
List: patchmanagement
Subject: [patchmanagement] How to disable Flash Autoupdate on a x64 windows
From: "Vreman, Peter" <peter.vreman () tatasteel ! com>
Date: 2015-04-23 21:23:39
Message-ID: HE1PR06MB128957CD52E6AE9D26BE0DED85ED0 () HE1PR06MB1289 ! eurprd06 ! prod ! outlook ! com
[Download RAW message or body]
We always disabled the autoupdate for flash on our XP machines by creating =
an mms.cfg in C:\WINDOWS\system32\Macromed\Flash\mms.cfg.
Now we start needing also the browser plugin version on our W81 x64 environ=
ment (and not just the ActiveX version which is provided and updated by Mic=
rosoft).
I am aware of some previous discussions and warnings that to disable the au=
toupdate on a X64 bits windows you need a file C:\WINDOWS\system32\Macromed=
\Flash\mms.cfg and a C:\Windows\SysWOW64\Macromed\Flash\mms.cfg
We had the same problem and discovered that mms.cfg needs to be in both C:\=
Windows\System32\Macromed\Flash and C:\Windows\SysWOW64\Macromed\Flash. If=
it is not in C:\Windows\System32\Macromed\Flash, you will see that when a =
non-admin user runs the C:\Windows\SysWOW64\FlashPlayerApp.exe, the Avanced=
tab will show the "Notify me to install updates" will be selected and gray=
ed out and users will be prompted to update. Running it as an admin will p=
ick up the mms.cfg setting in SysWOW64 and show "Never check for updates (n=
ot recommended)" selected and not grayed out. I could not find this docume=
nted on Adobe's forum.
For XP made the changes by using an MST to alter the MSI from Adobe and we =
hope we can do the same for Win81
Doing some research on this I see on IT nija that there is a new way (http:=
//www.itninja.com/software/adobe/flash-player-activex/11-1367 )
If you add "-install -au 2" argument to the start of the exe (inside the MS=
I) the Autopudate is disabled for you (the installer will no longer install=
a task or a service)
http://www.gregorystrike.com/2012/05/15/the-adobe-flash-player-update-servi=
ce-starts-up-every-hour/ (I get the impression that Stephen Pohl is from Ad=
obe)
I wonder if anybody has so experience with "install -au 2" and/or has some =
more reference material on it preferably from adobe
**********************************************************************
This transmission is confidential and must not be used or disclosed by anyo=
ne other than the intended recipient. Neither Tata Steel Europe Limited nor=
any of its subsidiaries can accept any responsibility for any use or misus=
e of the transmission by anyone.
For address and company registration details of certain entities within the=
Tata Steel Europe group of companies, please visit http://www.tatasteeleur=
ope.com/entities
**********************************************************************
---
PatchManagement.org is hosted by Shavlik
The content on the email list is intended for assisting administrators. If=
you would like to use any of this content in a blog or media publication, =
please contact the owners of the list for approval.
To unsubscribe send a blank email to leave-patchmanagement@patchmanagement.=
org
If you are unable to unsubscribe via this email address, please email
owner-patchmanagement@patchmanagement.org
[Attachment #3 (text/html)]
<html xmlns:v="urn:schemas-microsoft-com:vml" \
xmlns:o="urn:schemas-microsoft-com:office:office" \
xmlns:w="urn:schemas-microsoft-com:office:word" \
xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" \
xmlns="http://www.w3.org/TR/REC-html40"> <head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="NL" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span lang="EN-US">We always disabled the autoupdate for flash \
on our XP machines by creating an mms.cfg in </span><span lang="EN-US" \
style="font-size:10.5pt;font-family:"Helvetica",sans-serif;color:#333333">C:\WINDOWS\system32\Macromed\Flash\mms.cfg.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" \
style="font-size:10.5pt;font-family:"Helvetica",sans-serif;color:#333333"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" \
style="font-size:10.5pt;font-family:"Helvetica",sans-serif;color:#333333">Now \
we start needing also the browser plugin version on our W81 x64 environment (and not \
just the ActiveX version which is provided and updated by \
Microsoft).<o:p></o:p></span></p> <p class="MsoNormal"><span lang="EN-US" \
style="font-size:10.5pt;font-family:"Helvetica",sans-serif;color:#333333"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" \
style="font-size:10.5pt;font-family:"Helvetica",sans-serif;color:#333333">I \
am aware of some previous discussions and warnings that to disable the autoupdate on \
a X64 bits windows you need a file C:\WINDOWS\system32\Macromed\Flash\mms.cfg and a \
C:\Windows\SysWOW64\Macromed\Flash\mms.cfg<o:p></o:p></span></p> <p \
class="MsoNormal"><span lang="EN-US" \
style="font-size:10.5pt;font-family:"Helvetica",sans-serif;color:#333333"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt"><span lang="EN-US" \
style="font-size:10.5pt;font-family:"Helvetica",sans-serif;color:#333333">We \
had the same problem and discovered that mms.cfg needs to be in both \
C:\Windows\System32\Macromed\Flash and C:\Windows\SysWOW64\Macromed\Flash. If \
it is not in C:\Windows\System32\Macromed\Flash, you will see that when a non-admin \
user runs the C:\Windows\SysWOW64\FlashPlayerApp.exe, the Avanced tab will show the \
"Notify me to install updates" will be selected and grayed out and users \
will be prompted to update. Running it as an admin will pick up the mms.cfg \
setting in SysWOW64 and show "Never check for updates (not recommended)" \
selected and not grayed out. I could not find this documented on Adobe's \
forum.<o:p></o:p></span></p> <p class="MsoNormal"><span lang="EN-US" \
style="font-size:10.5pt;font-family:"Helvetica",sans-serif;color:#333333"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" \
style="font-size:10.5pt;font-family:"Helvetica",sans-serif;color:#333333">For \
XP made the changes by using an MST to alter the MSI from Adobe and we hope we can do \
the same for Win81<o:p></o:p></span></p> <p class="MsoNormal"><span lang="EN-US" \
style="font-size:10.5pt;font-family:"Helvetica",sans-serif;color:#333333"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" \
style="font-size:10.5pt;font-family:"Helvetica",sans-serif;color:#333333">Doing \
some research on this I see on IT nija that there is a new way (<a \
href="http://www.itninja.com/software/adobe/flash-player-activex/11-1367">http://www.itninja.com/software/adobe/flash-player-activex/11-1367</a>
)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" \
style="font-size:10.5pt;font-family:"Helvetica",sans-serif;color:#333333">If \
you add "-install -au 2" argument to the start of the exe (inside the MSI) \
the Autopudate is disabled for you (the installer will no longer install a task or a \
service)<o:p></o:p></span></p> <p class="MsoNormal"><span \
lang="EN-US"><o:p> </o:p></span></p> <p class="MsoNormal"><span lang="EN-US"><a \
href="http://www.gregorystrike.com/2012/05/15/the-adobe-flash-player-update-service-st \
arts-up-every-hour/">http://www.gregorystrike.com/2012/05/15/the-adobe-flash-player-update-service-starts-up-every-hour/</a> \
(I get the impression that Stephen Pohl is from Adobe)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">I wonder if anybody has so experience with \
“</span><span lang="EN-US" \
style="font-size:10.5pt;font-family:"Helvetica",sans-serif;color:#333333">install \
-au 2” and/or has some more reference material on it preferably from \
adobe</span><span lang="EN-US"><o:p></o:p></span></p> </div>
<div>
<p><font size="2" face="Arial">**********************************************************************</p>
<p>This transmission is confidential and must not be used or disclosed by anyone \
other than the intended recipient. Neither Tata Steel Europe Limited nor any of its \
subsidiaries can accept any responsibility for any use or misuse of the transmission \
by anyone.</p> <p>For address and company registration details of certain entities \
within the Tata Steel Europe group of companies, please visit <a \
href="http://www.tatasteeleurope.com/entities">http://www.tatasteeleurope.com/entities</a></p>
<p>**********************************************************************</font></p>
</div>
</body>
</html>
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic