Set-AcrobatFeatureLockdown.ps1

<#
.SYNOPSIS
    Applies Adobe Acrobat DC FeatureLockdown registry keys via Intune.

.DESCRIPTION
    This script configures specific FeatureLockdown registry settings to optimise Adobe Acrobat DC 
    for enterprise deployment using the Universal Installer.

    It:
    - Enforces Enhanced Security (Reduced Mode)
    - Suppresses Upsell/Upgrade messages in Acrobat Reader

    These settings are required to ensure a streamlined and secure end-user experience 
    during Adobe Creative Cloud deployments managed through Intune using the Universal Installer.

.NOTES
    Created: 2025-04-20
    Use case: Intune Win32 or PowerShell Script deployment for standard Adobe Acrobat behaviour.

    Registry Keys Applied:
    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Adobe\Adobe Acrobat\DC\FeatureLockDown]
    "bIsSCReducedModeEnforcedEx"=dword:00000001
    "bAcroSuppressUpsell"=dword:00000001
#>

# Define the registry path
$registryPath = "HKLM:\SOFTWARE\Policies\Adobe\Adobe Acrobat\DC\FeatureLockDown"

# Create the registry key path if it doesn't exist
if (-not (Test-Path $registryPath)) {
    try {
        New-Item -Path $registryPath -Force | Out-Null
        Write-Output "Created registry path: $registryPath"
    } catch {
        Write-Error "Failed to create registry path: $_"
        exit 1
    }
}

# Apply FeatureLockdown settings
try {
    # Enforce Enhanced Security (Reduced Mode)
    New-ItemProperty -Path $registryPath -Name "bIsSCReducedModeEnforcedEx" -PropertyType DWord -Value 1 -Force | Out-Null
    Write-Output "Set bIsSCReducedModeEnforcedEx to 1"

    # Suppress Acrobat Upsell messages
    New-ItemProperty -Path $registryPath -Name "bAcroSuppressUpsell" -PropertyType DWord -Value 1 -Force | Out-Null
    Write-Output "Set bAcroSuppressUpsell to 1"
} catch {
    Write-Error "Failed to set registry keys: $_"
    exit 1
}

Write-Output "Adobe Acrobat FeatureLockdown registry keys applied successfully."