USNS MONTFORD POINT - Findings

Showing 50 of 78 findings (filtered) View Documentation Status (90 tracked)

Vuln ID	Severity	Asset	STIG	Title	Doc Status
V-213192	CAT I	MONT-WS-92040	Adobe Acrobat Reader DC Continuous Track...	Adobe Reader DC must have the latest Security-rela...	-
Check Text Determine the method for doing this (e.g., connection to a WSUS server, local procedure, auto update, etc.). Open Adobe Acrobat Reader DC. Navigate to and click on Help >> About Adobe Acrobat Reader DC. Verify that the latest security-related software updates by Adobe are being applied. If the latest security-related software updates by Adobe are not being applied, this is a finding. Fix Text Apply the latest security-related software updates to the Adobe Acrobat Reader application. Finding Details Evaluate-STIG 1.2507.5 (Scan-AdobeReaderDCContinuous_Checks) was unable to determine a Status but found the below configuration on 10/23/2025: ResultHash: 52C747ED8AD535C8D5B3C3BFCE49764504D0FE1D ~~~~~ Name: Adobe Reader DC Version: DC Track: Continuous DisplayVersion: 25.001.20756 Architecture: x86 Source: _Reviewed/MONT-WS-92040/Checklist/MONT-WS-92040_AdobeReaderDCContinuous_V2R1_20251023-142113.ckl Scan Date: 2026-01-14T12:57:25.224753 Technology Area: Windows Operating System
V-213192	CAT I	MONT-SW-89108	Adobe Acrobat Reader DC Continuous Track...	Adobe Reader DC must have the latest Security-rela...	-
Check Text Determine the method for doing this (e.g., connection to a WSUS server, local procedure, auto update, etc.). Open Adobe Acrobat Reader DC. Navigate to and click on Help >> About Adobe Acrobat Reader DC. Verify that the latest security-related software updates by Adobe are being applied. If the latest security-related software updates by Adobe are not being applied, this is a finding. Fix Text Apply the latest security-related software updates to the Adobe Acrobat Reader application. Finding Details Evaluate-STIG 1.2510.0 (Scan-AdobeReaderDCContinuous_Checks) was unable to determine a Status but found the below configuration on 12/17/2025: ResultHash: 55F395109A6C5171DE708830F5FECF87BC7FEB32 ~~~~~ Name: Adobe Reader DC Version: DC Track: Continuous DisplayVersion: 25.001.20997 Architecture: x86 Source: MONT-SW-89108_AdobeReaderDCContinuous_V2R1_20251217-202743.ckl Scan Date: 2026-03-04T15:25:15.734702 Technology Area: Windows Operating System
V-213192	CAT I	MONT-SW-89134	Adobe Acrobat Reader DC Continuous Track...	Adobe Reader DC must have the latest Security-rela...	-
Check Text Determine the method for doing this (e.g., connection to a WSUS server, local procedure, auto update, etc.). Open Adobe Acrobat Reader DC. Navigate to and click on Help >> About Adobe Acrobat Reader DC. Verify that the latest security-related software updates by Adobe are being applied. If the latest security-related software updates by Adobe are not being applied, this is a finding. Fix Text Apply the latest security-related software updates to the Adobe Acrobat Reader application. Finding Details Evaluate-STIG 1.2510.0 (Scan-AdobeReaderDCContinuous_Checks) was unable to determine a Status but found the below configuration on 12/17/2025: ResultHash: 55F395109A6C5171DE708830F5FECF87BC7FEB32 ~~~~~ Name: Adobe Reader DC Version: DC Track: Continuous DisplayVersion: 25.001.20997 Architecture: x86 Source: MONT-SW-89134_AdobeReaderDCContinuous_V2R1_20251217-200921.ckl Scan Date: 2026-03-04T15:25:41.765624 Technology Area: Windows Operating System
V-213168	CAT II	MONT-WS-92040	Adobe Acrobat Reader DC Continuous Track...	Adobe Reader DC must enable Enhanced Security in a...	-
Check Text Verify the following registry configuration: Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bEnhancedSecurityStandalone Type: REG_DWORD Value: 1 If the value for bEnhancedSecurityStandalone is not set to “1” and Type configured to REG_DWORD or does not exist, then this is a finding. Fix Text Configure the following registry value: Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bEnhancedSecurityStandalone Type: REG_DWORD Value: 1 Finding Details Evaluate-STIG 1.2507.5 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 026A7712392177E522A06BA0BAE45493CC2E4EF5 ~~~~~ 'Enable Enhanced Security Standalone' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bEnhancedSecurityStandalone Value: 0x00000001 (1) Type: REG_DWORD Source: _Reviewed/MONT-WS-92040/Checklist/MONT-WS-92040_AdobeReaderDCContinuous_V2R1_20251023-142113.ckl Scan Date: 2026-01-14T12:57:25.224753 Technology Area: Windows Operating System
V-213168	CAT II	MONT-SW-89108	Adobe Acrobat Reader DC Continuous Track...	Adobe Reader DC must enable Enhanced Security in a...	-
Check Text Verify the following registry configuration: Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bEnhancedSecurityStandalone Type: REG_DWORD Value: 1 If the value for bEnhancedSecurityStandalone is not set to “1” and Type configured to REG_DWORD or does not exist, then this is a finding. Fix Text Configure the following registry value: Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bEnhancedSecurityStandalone Type: REG_DWORD Value: 1 Finding Details Evaluate-STIG 1.2510.0 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 026A7712392177E522A06BA0BAE45493CC2E4EF5 ~~~~~ 'Enable Enhanced Security Standalone' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bEnhancedSecurityStandalone Value: 0x00000001 (1) Type: REG_DWORD Source: MONT-SW-89108_AdobeReaderDCContinuous_V2R1_20251217-202743.ckl Scan Date: 2026-03-04T15:25:15.734702 Technology Area: Windows Operating System
V-213168	CAT II	MONT-SW-89134	Adobe Acrobat Reader DC Continuous Track...	Adobe Reader DC must enable Enhanced Security in a...	-
Check Text Verify the following registry configuration: Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bEnhancedSecurityStandalone Type: REG_DWORD Value: 1 If the value for bEnhancedSecurityStandalone is not set to “1” and Type configured to REG_DWORD or does not exist, then this is a finding. Fix Text Configure the following registry value: Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bEnhancedSecurityStandalone Type: REG_DWORD Value: 1 Finding Details Evaluate-STIG 1.2510.0 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 026A7712392177E522A06BA0BAE45493CC2E4EF5 ~~~~~ 'Enable Enhanced Security Standalone' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bEnhancedSecurityStandalone Value: 0x00000001 (1) Type: REG_DWORD Source: MONT-SW-89134_AdobeReaderDCContinuous_V2R1_20251217-200921.ckl Scan Date: 2026-03-04T15:25:41.765624 Technology Area: Windows Operating System
V-213169	CAT II	MONT-WS-92040	Adobe Acrobat Reader DC Continuous Track...	Adobe Reader DC must enable Enhanced Security in a...	-
Check Text Verify the following registry configuration: Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bEnhancedSecurityInBrowser Type: REG_DWORD Value: 1 If the value for bEnhancedSecurityInBrowser is not set to “1” and Type configured to REG_DWORD or does not exist, then this is a finding. Fix Text Configure the following registry value: Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bEnhancedSecurityInBrowser Type: REG_DWORD Value: 1 Finding Details Evaluate-STIG 1.2507.5 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 0E65388627213752CFE0EE642175597DDB0ABB12 ~~~~~ 'Enable Enhanced Security In Browser' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bEnhancedSecurityInBrowser Value: 0x00000001 (1) Type: REG_DWORD Source: _Reviewed/MONT-WS-92040/Checklist/MONT-WS-92040_AdobeReaderDCContinuous_V2R1_20251023-142113.ckl Scan Date: 2026-01-14T12:57:25.224753 Technology Area: Windows Operating System
V-213169	CAT II	MONT-SW-89108	Adobe Acrobat Reader DC Continuous Track...	Adobe Reader DC must enable Enhanced Security in a...	-
Check Text Verify the following registry configuration: Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bEnhancedSecurityInBrowser Type: REG_DWORD Value: 1 If the value for bEnhancedSecurityInBrowser is not set to “1” and Type configured to REG_DWORD or does not exist, then this is a finding. Fix Text Configure the following registry value: Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bEnhancedSecurityInBrowser Type: REG_DWORD Value: 1 Finding Details Evaluate-STIG 1.2510.0 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 0E65388627213752CFE0EE642175597DDB0ABB12 ~~~~~ 'Enable Enhanced Security In Browser' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bEnhancedSecurityInBrowser Value: 0x00000001 (1) Type: REG_DWORD Source: MONT-SW-89108_AdobeReaderDCContinuous_V2R1_20251217-202743.ckl Scan Date: 2026-03-04T15:25:15.734702 Technology Area: Windows Operating System
V-213169	CAT II	MONT-SW-89134	Adobe Acrobat Reader DC Continuous Track...	Adobe Reader DC must enable Enhanced Security in a...	-
Check Text Verify the following registry configuration: Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bEnhancedSecurityInBrowser Type: REG_DWORD Value: 1 If the value for bEnhancedSecurityInBrowser is not set to “1” and Type configured to REG_DWORD or does not exist, then this is a finding. Fix Text Configure the following registry value: Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bEnhancedSecurityInBrowser Type: REG_DWORD Value: 1 Finding Details Evaluate-STIG 1.2510.0 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 0E65388627213752CFE0EE642175597DDB0ABB12 ~~~~~ 'Enable Enhanced Security In Browser' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bEnhancedSecurityInBrowser Value: 0x00000001 (1) Type: REG_DWORD Source: MONT-SW-89134_AdobeReaderDCContinuous_V2R1_20251217-200921.ckl Scan Date: 2026-03-04T15:25:41.765624 Technology Area: Windows Operating System
V-213170	CAT II	MONT-WS-92040	Adobe Acrobat Reader DC Continuous Track...	Adobe Reader DC must enable Protected Mode.	-
Check Text Verify the following registry configuration: Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bProtectedMode Type: REG_DWORD Value: 1 If the value for bProtectedMode is not set to “1” and Type configured to REG_DWORD or does not exist, then this is a finding. Fix Text Configure the following registry value: Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bProtectedMode Type: REG_DWORD Value: 1 Finding Details Evaluate-STIG 1.2507.5 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F56BA44B4F03A7705BDC04245F1970912B529F40 ~~~~~ 'Enable Protected Mode at startup' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bProtectedMode Value: 0x00000001 (1) Type: REG_DWORD Source: _Reviewed/MONT-WS-92040/Checklist/MONT-WS-92040_AdobeReaderDCContinuous_V2R1_20251023-142113.ckl Scan Date: 2026-01-14T12:57:25.224753 Technology Area: Windows Operating System
V-213170	CAT II	MONT-SW-89108	Adobe Acrobat Reader DC Continuous Track...	Adobe Reader DC must enable Protected Mode.	-
Check Text Verify the following registry configuration: Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bProtectedMode Type: REG_DWORD Value: 1 If the value for bProtectedMode is not set to “1” and Type configured to REG_DWORD or does not exist, then this is a finding. Fix Text Configure the following registry value: Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bProtectedMode Type: REG_DWORD Value: 1 Finding Details Evaluate-STIG 1.2510.0 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: F56BA44B4F03A7705BDC04245F1970912B529F40 ~~~~~ 'Enable Protected Mode at startup' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bProtectedMode Value: 0x00000001 (1) Type: REG_DWORD Source: MONT-SW-89108_AdobeReaderDCContinuous_V2R1_20251217-202743.ckl Scan Date: 2026-03-04T15:25:15.734702 Technology Area: Windows Operating System
V-213170	CAT II	MONT-SW-89134	Adobe Acrobat Reader DC Continuous Track...	Adobe Reader DC must enable Protected Mode.	-
Check Text Verify the following registry configuration: Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bProtectedMode Type: REG_DWORD Value: 1 If the value for bProtectedMode is not set to “1” and Type configured to REG_DWORD or does not exist, then this is a finding. Fix Text Configure the following registry value: Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bProtectedMode Type: REG_DWORD Value: 1 Finding Details Evaluate-STIG 1.2510.0 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: F56BA44B4F03A7705BDC04245F1970912B529F40 ~~~~~ 'Enable Protected Mode at startup' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bProtectedMode Value: 0x00000001 (1) Type: REG_DWORD Source: MONT-SW-89134_AdobeReaderDCContinuous_V2R1_20251217-200921.ckl Scan Date: 2026-03-04T15:25:41.765624 Technology Area: Windows Operating System
V-213171	CAT II	MONT-WS-92040	Adobe Acrobat Reader DC Continuous Track...	Adobe Reader DC must enable Protected View.	-
Check Text Verify the following registry configuration: Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: iProtectedView Type: REG_DWORD Value: 2 If the value for iProtectedView is not set to “2” and Type configured to REG_DWORD or does not exist, then this is a finding. Fix Text Configure the following registry value: Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: iProtectedView Type: REG_DWORD Value: 2 Finding Details Evaluate-STIG 1.2507.5 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 9C834D0F57BEA07235F5FD2EA669F35F0DFE5DE9 ~~~~~ 'Protected View: All files' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: iProtectedView Value: 0x00000002 (2) Type: REG_DWORD Source: _Reviewed/MONT-WS-92040/Checklist/MONT-WS-92040_AdobeReaderDCContinuous_V2R1_20251023-142113.ckl Scan Date: 2026-01-14T12:57:25.224753 Technology Area: Windows Operating System
V-213171	CAT II	MONT-SW-89108	Adobe Acrobat Reader DC Continuous Track...	Adobe Reader DC must enable Protected View.	-
Check Text Verify the following registry configuration: Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: iProtectedView Type: REG_DWORD Value: 2 If the value for iProtectedView is not set to “2” and Type configured to REG_DWORD or does not exist, then this is a finding. Fix Text Configure the following registry value: Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: iProtectedView Type: REG_DWORD Value: 2 Finding Details Evaluate-STIG 1.2510.0 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 9C834D0F57BEA07235F5FD2EA669F35F0DFE5DE9 ~~~~~ 'Protected View: All files' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: iProtectedView Value: 0x00000002 (2) Type: REG_DWORD Source: MONT-SW-89108_AdobeReaderDCContinuous_V2R1_20251217-202743.ckl Scan Date: 2026-03-04T15:25:15.734702 Technology Area: Windows Operating System
V-213171	CAT II	MONT-SW-89134	Adobe Acrobat Reader DC Continuous Track...	Adobe Reader DC must enable Protected View.	-
Check Text Verify the following registry configuration: Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: iProtectedView Type: REG_DWORD Value: 2 If the value for iProtectedView is not set to “2” and Type configured to REG_DWORD or does not exist, then this is a finding. Fix Text Configure the following registry value: Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: iProtectedView Type: REG_DWORD Value: 2 Finding Details Evaluate-STIG 1.2510.0 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 9C834D0F57BEA07235F5FD2EA669F35F0DFE5DE9 ~~~~~ 'Protected View: All files' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: iProtectedView Value: 0x00000002 (2) Type: REG_DWORD Source: MONT-SW-89134_AdobeReaderDCContinuous_V2R1_20251217-200921.ckl Scan Date: 2026-03-04T15:25:41.765624 Technology Area: Windows Operating System
V-213172	CAT II	MONT-WS-92040	Adobe Acrobat Reader DC Continuous Track...	Adobe Reader DC must Block Websites.	-
Check Text Verify the following registry configuration: Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cDefaultLaunchURLPerms Value Name: iURLPerms Type: REG_DWORD Value: 1 Value: 0 - only with a documented ISSO risk acceptance If the value for “iURLPerms” is set to “0” and a documented ISSO risk acceptance approving access to websites is provided, this is not a finding. If the value for “iURLPerms” is not set to “1” and “Type” configured to “REG_DWORD” or does not exist, this is a finding. Fix Text Configure the following registry value: Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cDefaultLaunchURLPerms Value Name: iURLPerms Type: REG_DWORD Value: 1 If configuring system to allow access to websites, obtain documented ISSO approvals and risk acceptance and set “iURLPerms” to “0”. Finding Details Evaluate-STIG 1.2507.5 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 932AE2BE1F475877B8951F72A07E56BB4603F1CB ~~~~~ 'Access to websites: Block PDF files access to all web sites' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cDefaultLaunchURLPerms Value Name: iURLPerms Value: 0x00000001 (1) Type: REG_DWORD Source: _Reviewed/MONT-WS-92040/Checklist/MONT-WS-92040_AdobeReaderDCContinuous_V2R1_20251023-142113.ckl Scan Date: 2026-01-14T12:57:25.224753 Technology Area: Windows Operating System
V-213172	CAT II	MONT-SW-89108	Adobe Acrobat Reader DC Continuous Track...	Adobe Reader DC must Block Websites.	-
Check Text Verify the following registry configuration: Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cDefaultLaunchURLPerms Value Name: iURLPerms Type: REG_DWORD Value: 1 Value: 0 - only with a documented ISSO risk acceptance If the value for “iURLPerms” is set to “0” and a documented ISSO risk acceptance approving access to websites is provided, this is not a finding. If the value for “iURLPerms” is not set to “1” and “Type” configured to “REG_DWORD” or does not exist, this is a finding. Fix Text Configure the following registry value: Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cDefaultLaunchURLPerms Value Name: iURLPerms Type: REG_DWORD Value: 1 If configuring system to allow access to websites, obtain documented ISSO approvals and risk acceptance and set “iURLPerms” to “0”. Finding Details Evaluate-STIG 1.2510.0 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 932AE2BE1F475877B8951F72A07E56BB4603F1CB ~~~~~ 'Access to websites: Block PDF files access to all web sites' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cDefaultLaunchURLPerms Value Name: iURLPerms Value: 0x00000001 (1) Type: REG_DWORD Source: MONT-SW-89108_AdobeReaderDCContinuous_V2R1_20251217-202743.ckl Scan Date: 2026-03-04T15:25:15.734702 Technology Area: Windows Operating System
V-213172	CAT II	MONT-SW-89134	Adobe Acrobat Reader DC Continuous Track...	Adobe Reader DC must Block Websites.	-
Check Text Verify the following registry configuration: Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cDefaultLaunchURLPerms Value Name: iURLPerms Type: REG_DWORD Value: 1 Value: 0 - only with a documented ISSO risk acceptance If the value for “iURLPerms” is set to “0” and a documented ISSO risk acceptance approving access to websites is provided, this is not a finding. If the value for “iURLPerms” is not set to “1” and “Type” configured to “REG_DWORD” or does not exist, this is a finding. Fix Text Configure the following registry value: Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cDefaultLaunchURLPerms Value Name: iURLPerms Type: REG_DWORD Value: 1 If configuring system to allow access to websites, obtain documented ISSO approvals and risk acceptance and set “iURLPerms” to “0”. Finding Details Evaluate-STIG 1.2510.0 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 932AE2BE1F475877B8951F72A07E56BB4603F1CB ~~~~~ 'Access to websites: Block PDF files access to all web sites' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cDefaultLaunchURLPerms Value Name: iURLPerms Value: 0x00000001 (1) Type: REG_DWORD Source: MONT-SW-89134_AdobeReaderDCContinuous_V2R1_20251217-200921.ckl Scan Date: 2026-03-04T15:25:41.765624 Technology Area: Windows Operating System
V-213173	CAT II	MONT-WS-92040	Adobe Acrobat Reader DC Continuous Track...	Adobe Reader DC must block access to Unknown Websi...	-
Check Text Verify the following registry configuration: Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cDefaultLaunchURLPerms Value Name: iUnknownURLPerms Type: REG_DWORD Value: 3 If the value for iUnknownURLPerms is not set to “3” and Type configured to REG_DWORD or does not exist, then this is a finding. Fix Text Configure the following registry value: Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cDefaultLaunchURLPerms Value Name: iUnknownURLPerms Type: REG_DWORD Value: 3 Finding Details Evaluate-STIG 1.2507.5 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B2DD2F1F5DAC28D6AFCC9352F293636944DE3891 ~~~~~ 'Access to unknown websites: Block access' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cDefaultLaunchURLPerms Value Name: iUnknownURLPerms Value: 0x00000003 (3) Type: REG_DWORD Source: _Reviewed/MONT-WS-92040/Checklist/MONT-WS-92040_AdobeReaderDCContinuous_V2R1_20251023-142113.ckl Scan Date: 2026-01-14T12:57:25.224753 Technology Area: Windows Operating System
V-213173	CAT II	MONT-SW-89108	Adobe Acrobat Reader DC Continuous Track...	Adobe Reader DC must block access to Unknown Websi...	-
Check Text Verify the following registry configuration: Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cDefaultLaunchURLPerms Value Name: iUnknownURLPerms Type: REG_DWORD Value: 3 If the value for iUnknownURLPerms is not set to “3” and Type configured to REG_DWORD or does not exist, then this is a finding. Fix Text Configure the following registry value: Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cDefaultLaunchURLPerms Value Name: iUnknownURLPerms Type: REG_DWORD Value: 3 Finding Details Evaluate-STIG 1.2510.0 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: B2DD2F1F5DAC28D6AFCC9352F293636944DE3891 ~~~~~ 'Access to unknown websites: Block access' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cDefaultLaunchURLPerms Value Name: iUnknownURLPerms Value: 0x00000003 (3) Type: REG_DWORD Source: MONT-SW-89108_AdobeReaderDCContinuous_V2R1_20251217-202743.ckl Scan Date: 2026-03-04T15:25:15.734702 Technology Area: Windows Operating System
V-213173	CAT II	MONT-SW-89134	Adobe Acrobat Reader DC Continuous Track...	Adobe Reader DC must block access to Unknown Websi...	-
Check Text Verify the following registry configuration: Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cDefaultLaunchURLPerms Value Name: iUnknownURLPerms Type: REG_DWORD Value: 3 If the value for iUnknownURLPerms is not set to “3” and Type configured to REG_DWORD or does not exist, then this is a finding. Fix Text Configure the following registry value: Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cDefaultLaunchURLPerms Value Name: iUnknownURLPerms Type: REG_DWORD Value: 3 Finding Details Evaluate-STIG 1.2510.0 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: B2DD2F1F5DAC28D6AFCC9352F293636944DE3891 ~~~~~ 'Access to unknown websites: Block access' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cDefaultLaunchURLPerms Value Name: iUnknownURLPerms Value: 0x00000003 (3) Type: REG_DWORD Source: MONT-SW-89134_AdobeReaderDCContinuous_V2R1_20251217-200921.ckl Scan Date: 2026-03-04T15:25:41.765624 Technology Area: Windows Operating System
V-213174	CAT II	MONT-WS-92040	Adobe Acrobat Reader DC Continuous Track...	Adobe Reader DC must prevent opening files other t...	-
Check Text Verify the following registry configuration: Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: iFileAttachmentPerms Type: REG_DWORD Value: 1 If the value for iFileAttachmentPerms is not set to “1” and Type configured to REG_DWORD or does not exist, then this is a finding. Fix Text Configure the following registry value: Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: iFileAttachmentPerms Type: REG_DWORD Value: 1 Finding Details Evaluate-STIG 1.2507.5 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: D01E4CAC41C0A6D973296E957E479B08E93172AF ~~~~~ 'Allow opening of non-PDF file attachments with external applications' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: iFileAttachmentPerms Value: 0x00000001 (1) Type: REG_DWORD Source: _Reviewed/MONT-WS-92040/Checklist/MONT-WS-92040_AdobeReaderDCContinuous_V2R1_20251023-142113.ckl Scan Date: 2026-01-14T12:57:25.224753 Technology Area: Windows Operating System
V-213174	CAT II	MONT-SW-89108	Adobe Acrobat Reader DC Continuous Track...	Adobe Reader DC must prevent opening files other t...	-
Check Text Verify the following registry configuration: Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: iFileAttachmentPerms Type: REG_DWORD Value: 1 If the value for iFileAttachmentPerms is not set to “1” and Type configured to REG_DWORD or does not exist, then this is a finding. Fix Text Configure the following registry value: Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: iFileAttachmentPerms Type: REG_DWORD Value: 1 Finding Details Evaluate-STIG 1.2510.0 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: D01E4CAC41C0A6D973296E957E479B08E93172AF ~~~~~ 'Allow opening of non-PDF file attachments with external applications' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: iFileAttachmentPerms Value: 0x00000001 (1) Type: REG_DWORD Source: MONT-SW-89108_AdobeReaderDCContinuous_V2R1_20251217-202743.ckl Scan Date: 2026-03-04T15:25:15.734702 Technology Area: Windows Operating System
V-213174	CAT II	MONT-SW-89134	Adobe Acrobat Reader DC Continuous Track...	Adobe Reader DC must prevent opening files other t...	-
Check Text Verify the following registry configuration: Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: iFileAttachmentPerms Type: REG_DWORD Value: 1 If the value for iFileAttachmentPerms is not set to “1” and Type configured to REG_DWORD or does not exist, then this is a finding. Fix Text Configure the following registry value: Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: iFileAttachmentPerms Type: REG_DWORD Value: 1 Finding Details Evaluate-STIG 1.2510.0 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: D01E4CAC41C0A6D973296E957E479B08E93172AF ~~~~~ 'Allow opening of non-PDF file attachments with external applications' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: iFileAttachmentPerms Value: 0x00000001 (1) Type: REG_DWORD Source: MONT-SW-89134_AdobeReaderDCContinuous_V2R1_20251217-200921.ckl Scan Date: 2026-03-04T15:25:41.765624 Technology Area: Windows Operating System
V-213175	CAT II	MONT-WS-92040	Adobe Acrobat Reader DC Continuous Track...	Adobe Reader DC must block Flash Content.	-
Check Text Verify the following registry configuration: Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bEnableFlash Type: REG_DWORD Value: 0 If the value for bEnableFlash is not set to “0” and Type configured to REG_DWORD or does not exist, then this is a finding. Fix Text Configure the following registry value: Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bEnableFlash Type: REG_DWORD Value: 0 Finding Details Evaluate-STIG 1.2507.5 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 9A5846A993365728C937DB0A533035091798AA6B ~~~~~ 'Enable Flash' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bEnableFlash Value: 0x00000000 (0) Type: REG_DWORD Source: _Reviewed/MONT-WS-92040/Checklist/MONT-WS-92040_AdobeReaderDCContinuous_V2R1_20251023-142113.ckl Scan Date: 2026-01-14T12:57:25.224753 Technology Area: Windows Operating System
V-213175	CAT II	MONT-SW-89108	Adobe Acrobat Reader DC Continuous Track...	Adobe Reader DC must block Flash Content.	-
Check Text Verify the following registry configuration: Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bEnableFlash Type: REG_DWORD Value: 0 If the value for bEnableFlash is not set to “0” and Type configured to REG_DWORD or does not exist, then this is a finding. Fix Text Configure the following registry value: Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bEnableFlash Type: REG_DWORD Value: 0 Finding Details Evaluate-STIG 1.2510.0 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 9A5846A993365728C937DB0A533035091798AA6B ~~~~~ 'Enable Flash' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bEnableFlash Value: 0x00000000 (0) Type: REG_DWORD Source: MONT-SW-89108_AdobeReaderDCContinuous_V2R1_20251217-202743.ckl Scan Date: 2026-03-04T15:25:15.734702 Technology Area: Windows Operating System
V-213175	CAT II	MONT-SW-89134	Adobe Acrobat Reader DC Continuous Track...	Adobe Reader DC must block Flash Content.	-
Check Text Verify the following registry configuration: Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bEnableFlash Type: REG_DWORD Value: 0 If the value for bEnableFlash is not set to “0” and Type configured to REG_DWORD or does not exist, then this is a finding. Fix Text Configure the following registry value: Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bEnableFlash Type: REG_DWORD Value: 0 Finding Details Evaluate-STIG 1.2510.0 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 9A5846A993365728C937DB0A533035091798AA6B ~~~~~ 'Enable Flash' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bEnableFlash Value: 0x00000000 (0) Type: REG_DWORD Source: MONT-SW-89134_AdobeReaderDCContinuous_V2R1_20251217-200921.ckl Scan Date: 2026-03-04T15:25:41.765624 Technology Area: Windows Operating System
V-213178	CAT II	MONT-WS-92040	Adobe Acrobat Reader DC Continuous Track...	Adobe Reader DC must disable all service access to...	-
Check Text Verify the following registry configuration: Note: The Key Name "cServices" is not created by default in the Adobe Reader DC install and must be created. Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cServices Value Name: bToggleAdobeDocumentServices Type: REG_DWORD Value: 1 If the value for bToggleAdobeDocumentServices is not set to “1” and Type configured to REG_DWORD or does not exist, then this is a finding. Fix Text Configure the following registry value: Note: The Key Name "cServices" is not created by default in the Adobe Reader DC install and must be created. Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cServices Value Name: bToggleAdobeDocumentServices Type: REG_DWORD Value: 1 Finding Details Evaluate-STIG 1.2507.5 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 77B9CB076F85356B6622BD5D925A259B76DFC001 ~~~~~ 'Service access to Document Cloud Services' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cServices Value Name: bToggleAdobeDocumentServices Value: 0x00000001 (1) Type: REG_DWORD Source: _Reviewed/MONT-WS-92040/Checklist/MONT-WS-92040_AdobeReaderDCContinuous_V2R1_20251023-142113.ckl Scan Date: 2026-01-14T12:57:25.224753 Technology Area: Windows Operating System
V-213178	CAT II	MONT-SW-89108	Adobe Acrobat Reader DC Continuous Track...	Adobe Reader DC must disable all service access to...	-
Check Text Verify the following registry configuration: Note: The Key Name "cServices" is not created by default in the Adobe Reader DC install and must be created. Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cServices Value Name: bToggleAdobeDocumentServices Type: REG_DWORD Value: 1 If the value for bToggleAdobeDocumentServices is not set to “1” and Type configured to REG_DWORD or does not exist, then this is a finding. Fix Text Configure the following registry value: Note: The Key Name "cServices" is not created by default in the Adobe Reader DC install and must be created. Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cServices Value Name: bToggleAdobeDocumentServices Type: REG_DWORD Value: 1 Finding Details Evaluate-STIG 1.2510.0 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 77B9CB076F85356B6622BD5D925A259B76DFC001 ~~~~~ 'Service access to Document Cloud Services' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cServices Value Name: bToggleAdobeDocumentServices Value: 0x00000001 (1) Type: REG_DWORD Source: MONT-SW-89108_AdobeReaderDCContinuous_V2R1_20251217-202743.ckl Scan Date: 2026-03-04T15:25:15.734702 Technology Area: Windows Operating System
V-213178	CAT II	MONT-SW-89134	Adobe Acrobat Reader DC Continuous Track...	Adobe Reader DC must disable all service access to...	-
Check Text Verify the following registry configuration: Note: The Key Name "cServices" is not created by default in the Adobe Reader DC install and must be created. Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cServices Value Name: bToggleAdobeDocumentServices Type: REG_DWORD Value: 1 If the value for bToggleAdobeDocumentServices is not set to “1” and Type configured to REG_DWORD or does not exist, then this is a finding. Fix Text Configure the following registry value: Note: The Key Name "cServices" is not created by default in the Adobe Reader DC install and must be created. Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cServices Value Name: bToggleAdobeDocumentServices Type: REG_DWORD Value: 1 Finding Details Evaluate-STIG 1.2510.0 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 77B9CB076F85356B6622BD5D925A259B76DFC001 ~~~~~ 'Service access to Document Cloud Services' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cServices Value Name: bToggleAdobeDocumentServices Value: 0x00000001 (1) Type: REG_DWORD Source: MONT-SW-89134_AdobeReaderDCContinuous_V2R1_20251217-200921.ckl Scan Date: 2026-03-04T15:25:41.765624 Technology Area: Windows Operating System
V-213179	CAT II	MONT-WS-92040	Adobe Acrobat Reader DC Continuous Track...	Adobe Reader DC must disable Cloud Synchronization...	-
Check Text Verify the following registry configuration: Note: The Key Name "cServices" is not created by default in the Adobe Reader DC install and must be created. Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cServices Value Name: bTogglePrefsSync Type: REG_DWORD Value: 1 If the value for bTogglePrefsSync is not set to “1” and Type configured to REG_DWORD or does not exist, then this is a finding. Fix Text Configure the following registry value: Note: The Key Name "cServices" is not created by default in the Adobe Reader DC install and must be created. Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cServices Value Name: bTogglePrefsSync Type: REG_DWORD Value: 1 Finding Details Evaluate-STIG 1.2507.5 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 248D55C7A60D311F7472FCB52DD285B28BE3101F ~~~~~ 'Cloud Synchronization' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cServices Value Name: bTogglePrefsSync Value: 0x00000001 (1) Type: REG_DWORD Source: _Reviewed/MONT-WS-92040/Checklist/MONT-WS-92040_AdobeReaderDCContinuous_V2R1_20251023-142113.ckl Scan Date: 2026-01-14T12:57:25.224753 Technology Area: Windows Operating System
V-213179	CAT II	MONT-SW-89108	Adobe Acrobat Reader DC Continuous Track...	Adobe Reader DC must disable Cloud Synchronization...	-
Check Text Verify the following registry configuration: Note: The Key Name "cServices" is not created by default in the Adobe Reader DC install and must be created. Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cServices Value Name: bTogglePrefsSync Type: REG_DWORD Value: 1 If the value for bTogglePrefsSync is not set to “1” and Type configured to REG_DWORD or does not exist, then this is a finding. Fix Text Configure the following registry value: Note: The Key Name "cServices" is not created by default in the Adobe Reader DC install and must be created. Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cServices Value Name: bTogglePrefsSync Type: REG_DWORD Value: 1 Finding Details Evaluate-STIG 1.2510.0 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 248D55C7A60D311F7472FCB52DD285B28BE3101F ~~~~~ 'Cloud Synchronization' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cServices Value Name: bTogglePrefsSync Value: 0x00000001 (1) Type: REG_DWORD Source: MONT-SW-89108_AdobeReaderDCContinuous_V2R1_20251217-202743.ckl Scan Date: 2026-03-04T15:25:15.734702 Technology Area: Windows Operating System
V-213179	CAT II	MONT-SW-89134	Adobe Acrobat Reader DC Continuous Track...	Adobe Reader DC must disable Cloud Synchronization...	-
Check Text Verify the following registry configuration: Note: The Key Name "cServices" is not created by default in the Adobe Reader DC install and must be created. Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cServices Value Name: bTogglePrefsSync Type: REG_DWORD Value: 1 If the value for bTogglePrefsSync is not set to “1” and Type configured to REG_DWORD or does not exist, then this is a finding. Fix Text Configure the following registry value: Note: The Key Name "cServices" is not created by default in the Adobe Reader DC install and must be created. Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cServices Value Name: bTogglePrefsSync Type: REG_DWORD Value: 1 Finding Details Evaluate-STIG 1.2510.0 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 248D55C7A60D311F7472FCB52DD285B28BE3101F ~~~~~ 'Cloud Synchronization' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cServices Value Name: bTogglePrefsSync Value: 0x00000001 (1) Type: REG_DWORD Source: MONT-SW-89134_AdobeReaderDCContinuous_V2R1_20251217-200921.ckl Scan Date: 2026-03-04T15:25:41.765624 Technology Area: Windows Operating System
V-213181	CAT II	MONT-WS-92040	Adobe Acrobat Reader DC Continuous Track...	Adobe Reader DC must disable 3rd Party Web Connect...	-
Check Text Verify the following registry configuration: Note: The Key Name "cServices" is not created by default in the Adobe Reader DC install and must be created. Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cServices Value Name: bToggleWebConnectors Type: REG_DWORD Value: 1 If the value for bToggleWebConnectors is not set to “1” and Type configured to REG_DWORD or does not exist, then this is a finding. Fix Text Configure the following registry value: Note: The Key Name "cServices" is not created by default in the Adobe Reader DC install and must be created. Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cServices Value Name: bToggleWebConnectors Type: REG_DWORD Value: 1 Finding Details Evaluate-STIG 1.2507.5 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 76884A3735685CEC045A7F1BC1BC4624CC703837 ~~~~~ 'Third-party web connectors' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cServices Value Name: bToggleWebConnectors Value: 0x00000001 (1) Type: REG_DWORD Source: _Reviewed/MONT-WS-92040/Checklist/MONT-WS-92040_AdobeReaderDCContinuous_V2R1_20251023-142113.ckl Scan Date: 2026-01-14T12:57:25.224753 Technology Area: Windows Operating System
V-213181	CAT II	MONT-SW-89108	Adobe Acrobat Reader DC Continuous Track...	Adobe Reader DC must disable 3rd Party Web Connect...	-
Check Text Verify the following registry configuration: Note: The Key Name "cServices" is not created by default in the Adobe Reader DC install and must be created. Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cServices Value Name: bToggleWebConnectors Type: REG_DWORD Value: 1 If the value for bToggleWebConnectors is not set to “1” and Type configured to REG_DWORD or does not exist, then this is a finding. Fix Text Configure the following registry value: Note: The Key Name "cServices" is not created by default in the Adobe Reader DC install and must be created. Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cServices Value Name: bToggleWebConnectors Type: REG_DWORD Value: 1 Finding Details Evaluate-STIG 1.2510.0 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 76884A3735685CEC045A7F1BC1BC4624CC703837 ~~~~~ 'Third-party web connectors' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cServices Value Name: bToggleWebConnectors Value: 0x00000001 (1) Type: REG_DWORD Source: MONT-SW-89108_AdobeReaderDCContinuous_V2R1_20251217-202743.ckl Scan Date: 2026-03-04T15:25:15.734702 Technology Area: Windows Operating System
V-213181	CAT II	MONT-SW-89134	Adobe Acrobat Reader DC Continuous Track...	Adobe Reader DC must disable 3rd Party Web Connect...	-
Check Text Verify the following registry configuration: Note: The Key Name "cServices" is not created by default in the Adobe Reader DC install and must be created. Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cServices Value Name: bToggleWebConnectors Type: REG_DWORD Value: 1 If the value for bToggleWebConnectors is not set to “1” and Type configured to REG_DWORD or does not exist, then this is a finding. Fix Text Configure the following registry value: Note: The Key Name "cServices" is not created by default in the Adobe Reader DC install and must be created. Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cServices Value Name: bToggleWebConnectors Type: REG_DWORD Value: 1 Finding Details Evaluate-STIG 1.2510.0 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 76884A3735685CEC045A7F1BC1BC4624CC703837 ~~~~~ 'Third-party web connectors' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cServices Value Name: bToggleWebConnectors Value: 0x00000001 (1) Type: REG_DWORD Source: MONT-SW-89134_AdobeReaderDCContinuous_V2R1_20251217-200921.ckl Scan Date: 2026-03-04T15:25:41.765624 Technology Area: Windows Operating System
V-213184	CAT II	MONT-WS-92040	Adobe Acrobat Reader DC Continuous Track...	Adobe Reader DC must disable access to Webmail.	-
Check Text Verify the following registry configuration: Note: The Key Name "cWebmailProfiles" is not created by default in the Adobe Reader DC install and must be created. Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cWebmailProfiles Value Name: bDisableWebmail Type: REG_DWORD Value: 1 If the value for bDisableWebmail is not set to “1” and Type configured to REG_DWORD or does not exist, then this is a finding. Fix Text Configure the following registry value: Note: The Key Name "cWebmailProfiles" is not created by default in the Adobe Reader DC install and must be created. Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cWebmailProfiles Value Name: bDisableWebmail Type: REG_DWORD Value: 1 Finding Details Evaluate-STIG 1.2507.5 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: AF7F7A38D7D1497D7216AA3B8E073EA76F8612E9 ~~~~~ 'WebMail' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cWebmailProfiles Value Name: bDisableWebmail Value: 0x00000001 (1) Type: REG_DWORD Source: _Reviewed/MONT-WS-92040/Checklist/MONT-WS-92040_AdobeReaderDCContinuous_V2R1_20251023-142113.ckl Scan Date: 2026-01-14T12:57:25.224753 Technology Area: Windows Operating System
V-213184	CAT II	MONT-SW-89108	Adobe Acrobat Reader DC Continuous Track...	Adobe Reader DC must disable access to Webmail.	-
Check Text Verify the following registry configuration: Note: The Key Name "cWebmailProfiles" is not created by default in the Adobe Reader DC install and must be created. Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cWebmailProfiles Value Name: bDisableWebmail Type: REG_DWORD Value: 1 If the value for bDisableWebmail is not set to “1” and Type configured to REG_DWORD or does not exist, then this is a finding. Fix Text Configure the following registry value: Note: The Key Name "cWebmailProfiles" is not created by default in the Adobe Reader DC install and must be created. Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cWebmailProfiles Value Name: bDisableWebmail Type: REG_DWORD Value: 1 Finding Details Evaluate-STIG 1.2510.0 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: AF7F7A38D7D1497D7216AA3B8E073EA76F8612E9 ~~~~~ 'WebMail' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cWebmailProfiles Value Name: bDisableWebmail Value: 0x00000001 (1) Type: REG_DWORD Source: MONT-SW-89108_AdobeReaderDCContinuous_V2R1_20251217-202743.ckl Scan Date: 2026-03-04T15:25:15.734702 Technology Area: Windows Operating System
V-213184	CAT II	MONT-SW-89134	Adobe Acrobat Reader DC Continuous Track...	Adobe Reader DC must disable access to Webmail.	-
Check Text Verify the following registry configuration: Note: The Key Name "cWebmailProfiles" is not created by default in the Adobe Reader DC install and must be created. Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cWebmailProfiles Value Name: bDisableWebmail Type: REG_DWORD Value: 1 If the value for bDisableWebmail is not set to “1” and Type configured to REG_DWORD or does not exist, then this is a finding. Fix Text Configure the following registry value: Note: The Key Name "cWebmailProfiles" is not created by default in the Adobe Reader DC install and must be created. Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cWebmailProfiles Value Name: bDisableWebmail Type: REG_DWORD Value: 1 Finding Details Evaluate-STIG 1.2510.0 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: AF7F7A38D7D1497D7216AA3B8E073EA76F8612E9 ~~~~~ 'WebMail' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cWebmailProfiles Value Name: bDisableWebmail Value: 0x00000001 (1) Type: REG_DWORD Source: MONT-SW-89134_AdobeReaderDCContinuous_V2R1_20251217-200921.ckl Scan Date: 2026-03-04T15:25:41.765624 Technology Area: Windows Operating System
V-213185	CAT II	MONT-WS-92040	Adobe Acrobat Reader DC Continuous Track...	Adobe Reader DC must disable Online SharePoint Acc...	-
Check Text Verify the following registry configuration: If configured to an approved DoD SharePoint Server, this is NA. Note: The Key Name "cSharePoint" is not created by default in the Adobe Reader DC install and must be created. Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cSharePoint Value Name: bDisableSharePointFeatures Type: REG_DWORD Value: 1 If the value for bDisableSharePointFeatures is not set to “1” and Type configured to REG_DWORD or does not exist, then this is a finding. Fix Text Configure the following registry value: Note: The Key Name "cSharePoint" is not created by default in the Adobe Reader DC install and must be created. Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cSharePoint Value Name: bDisableSharePointFeatures Type: REG_DWORD Value: 1 Finding Details Evaluate-STIG 1.2507.5 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 778FDCE630C51576C1AB38A6A6B02EA8336A1C4D ~~~~~ 'SharePoint and Office 365 access' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cSharePoint Value Name: bDisableSharePointFeatures Value: 0x00000001 (1) Type: REG_DWORD Source: _Reviewed/MONT-WS-92040/Checklist/MONT-WS-92040_AdobeReaderDCContinuous_V2R1_20251023-142113.ckl Scan Date: 2026-01-14T12:57:25.224753 Technology Area: Windows Operating System
V-213185	CAT II	MONT-SW-89108	Adobe Acrobat Reader DC Continuous Track...	Adobe Reader DC must disable Online SharePoint Acc...	-
Check Text Verify the following registry configuration: If configured to an approved DoD SharePoint Server, this is NA. Note: The Key Name "cSharePoint" is not created by default in the Adobe Reader DC install and must be created. Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cSharePoint Value Name: bDisableSharePointFeatures Type: REG_DWORD Value: 1 If the value for bDisableSharePointFeatures is not set to “1” and Type configured to REG_DWORD or does not exist, then this is a finding. Fix Text Configure the following registry value: Note: The Key Name "cSharePoint" is not created by default in the Adobe Reader DC install and must be created. Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cSharePoint Value Name: bDisableSharePointFeatures Type: REG_DWORD Value: 1 Finding Details Evaluate-STIG 1.2510.0 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 778FDCE630C51576C1AB38A6A6B02EA8336A1C4D ~~~~~ 'SharePoint and Office 365 access' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cSharePoint Value Name: bDisableSharePointFeatures Value: 0x00000001 (1) Type: REG_DWORD Source: MONT-SW-89108_AdobeReaderDCContinuous_V2R1_20251217-202743.ckl Scan Date: 2026-03-04T15:25:15.734702 Technology Area: Windows Operating System
V-213185	CAT II	MONT-SW-89134	Adobe Acrobat Reader DC Continuous Track...	Adobe Reader DC must disable Online SharePoint Acc...	-
Check Text Verify the following registry configuration: If configured to an approved DoD SharePoint Server, this is NA. Note: The Key Name "cSharePoint" is not created by default in the Adobe Reader DC install and must be created. Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cSharePoint Value Name: bDisableSharePointFeatures Type: REG_DWORD Value: 1 If the value for bDisableSharePointFeatures is not set to “1” and Type configured to REG_DWORD or does not exist, then this is a finding. Fix Text Configure the following registry value: Note: The Key Name "cSharePoint" is not created by default in the Adobe Reader DC install and must be created. Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cSharePoint Value Name: bDisableSharePointFeatures Type: REG_DWORD Value: 1 Finding Details Evaluate-STIG 1.2510.0 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 778FDCE630C51576C1AB38A6A6B02EA8336A1C4D ~~~~~ 'SharePoint and Office 365 access' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cSharePoint Value Name: bDisableSharePointFeatures Value: 0x00000001 (1) Type: REG_DWORD Source: MONT-SW-89134_AdobeReaderDCContinuous_V2R1_20251217-200921.ckl Scan Date: 2026-03-04T15:25:41.765624 Technology Area: Windows Operating System
V-213188	CAT II	MONT-WS-92040	Adobe Acrobat Reader DC Continuous Track...	Adobe Reader DC must disable the ability to add Tr...	-
Check Text Verify the following registry configuration: Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bDisableTrustedFolders Type: REG_DWORD Value: 1 If the value for bDisableTrustedFolders is not set to “1” and Type configured to REG_DWORD or does not exist, then this is a finding. Fix Text Configure the following registry value: Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bDisableTrustedFolders Type: REG_DWORD Value: 1 Finding Details Evaluate-STIG 1.2507.5 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 15246B494416F0B34AC1736A02EC403E6597CEB0 ~~~~~ 'Privileged folder locations' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bDisableTrustedFolders Value: 0x00000001 (1) Type: REG_DWORD Source: _Reviewed/MONT-WS-92040/Checklist/MONT-WS-92040_AdobeReaderDCContinuous_V2R1_20251023-142113.ckl Scan Date: 2026-01-14T12:57:25.224753 Technology Area: Windows Operating System
V-213188	CAT II	MONT-SW-89108	Adobe Acrobat Reader DC Continuous Track...	Adobe Reader DC must disable the ability to add Tr...	-
Check Text Verify the following registry configuration: Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bDisableTrustedFolders Type: REG_DWORD Value: 1 If the value for bDisableTrustedFolders is not set to “1” and Type configured to REG_DWORD or does not exist, then this is a finding. Fix Text Configure the following registry value: Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bDisableTrustedFolders Type: REG_DWORD Value: 1 Finding Details Evaluate-STIG 1.2510.0 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 15246B494416F0B34AC1736A02EC403E6597CEB0 ~~~~~ 'Privileged folder locations' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bDisableTrustedFolders Value: 0x00000001 (1) Type: REG_DWORD Source: MONT-SW-89108_AdobeReaderDCContinuous_V2R1_20251217-202743.ckl Scan Date: 2026-03-04T15:25:15.734702 Technology Area: Windows Operating System
V-213188	CAT II	MONT-SW-89134	Adobe Acrobat Reader DC Continuous Track...	Adobe Reader DC must disable the ability to add Tr...	-
Check Text Verify the following registry configuration: Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bDisableTrustedFolders Type: REG_DWORD Value: 1 If the value for bDisableTrustedFolders is not set to “1” and Type configured to REG_DWORD or does not exist, then this is a finding. Fix Text Configure the following registry value: Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bDisableTrustedFolders Type: REG_DWORD Value: 1 Finding Details Evaluate-STIG 1.2510.0 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 15246B494416F0B34AC1736A02EC403E6597CEB0 ~~~~~ 'Privileged folder locations' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bDisableTrustedFolders Value: 0x00000001 (1) Type: REG_DWORD Source: MONT-SW-89134_AdobeReaderDCContinuous_V2R1_20251217-200921.ckl Scan Date: 2026-03-04T15:25:41.765624 Technology Area: Windows Operating System
V-213189	CAT II	MONT-WS-92040	Adobe Acrobat Reader DC Continuous Track...	Adobe Reader DC must disable the ability to elevat...	-
Check Text Verify the following registry configuration: Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bDisableTrustedSites Type: REG_DWORD Value: 1 If the value for bDisableTrustedSites is not set to “1” and Type configured to REG_DWORD or does not exist, then this is a finding. Fix Text Configure the following registry value: Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bDisableTrustedSites Type: REG_DWORD Value: 1 Finding Details Evaluate-STIG 1.2507.5 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B2799CCFC1C83AD01D852D3BD26C39C9D28EE1C1 ~~~~~ 'Privileged host locations' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bDisableTrustedSites Value: 0x00000001 (1) Type: REG_DWORD Source: _Reviewed/MONT-WS-92040/Checklist/MONT-WS-92040_AdobeReaderDCContinuous_V2R1_20251023-142113.ckl Scan Date: 2026-01-14T12:57:25.224753 Technology Area: Windows Operating System
V-213189	CAT II	MONT-SW-89108	Adobe Acrobat Reader DC Continuous Track...	Adobe Reader DC must disable the ability to elevat...	-
Check Text Verify the following registry configuration: Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bDisableTrustedSites Type: REG_DWORD Value: 1 If the value for bDisableTrustedSites is not set to “1” and Type configured to REG_DWORD or does not exist, then this is a finding. Fix Text Configure the following registry value: Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bDisableTrustedSites Type: REG_DWORD Value: 1 Finding Details Evaluate-STIG 1.2510.0 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: B2799CCFC1C83AD01D852D3BD26C39C9D28EE1C1 ~~~~~ 'Privileged host locations' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bDisableTrustedSites Value: 0x00000001 (1) Type: REG_DWORD Source: MONT-SW-89108_AdobeReaderDCContinuous_V2R1_20251217-202743.ckl Scan Date: 2026-03-04T15:25:15.734702 Technology Area: Windows Operating System
V-213189	CAT II	MONT-SW-89134	Adobe Acrobat Reader DC Continuous Track...	Adobe Reader DC must disable the ability to elevat...	-
Check Text Verify the following registry configuration: Utilizing the Registry Editor, navigate to the following: HKEY_LOCAL_MACHINE\Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bDisableTrustedSites Type: REG_DWORD Value: 1 If the value for bDisableTrustedSites is not set to “1” and Type configured to REG_DWORD or does not exist, then this is a finding. Fix Text Configure the following registry value: Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bDisableTrustedSites Type: REG_DWORD Value: 1 Finding Details Evaluate-STIG 1.2510.0 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: B2799CCFC1C83AD01D852D3BD26C39C9D28EE1C1 ~~~~~ 'Privileged host locations' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown Value Name: bDisableTrustedSites Value: 0x00000001 (1) Type: REG_DWORD Source: MONT-SW-89134_AdobeReaderDCContinuous_V2R1_20251217-200921.ckl Scan Date: 2026-03-04T15:25:41.765624 Technology Area: Windows Operating System
V-213193	CAT II	MONT-WS-92040	Adobe Acrobat Reader DC Continuous Track...	Adobe Reader DC must enable FIPS mode.	Documented Pending Review
Check Text Verify the following registry configuration: Note: The Key Names "bFIPSMode" is not created by default in the Adobe Reader DC install and must be created. Utilizing the Registry Editor, navigate to the following: HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\DC\AVGeneral Value Name: bFIPSMode Type: REG_DWORD Value: 1 If the value for bFIPSMode is not set to “1” and Type configured to REG_DWORD does not exist, then this is a finding. Fix Text Configure the following registry value: Note: The Key Names "bFIPSMode" is not created by default in the Adobe Reader DC install and must be created. Registry Hive: HKEY_CURRENT_USER Registry Path: \Software\Adobe\Acrobat Reader\DC\AVGeneral Value Name: bFIPSMode Type: REG_DWORD Value: 1 Finding Details Evaluate-STIG 1.2507.5 (Scan-AdobeReaderDCContinuous_Checks) found this to be OPEN on 10/23/2025 Username: MONTFORD-POINT\W.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106 ResultHash: 0953BC0DDDE64D9D7383C59DA5A8B777988C2D35 ~~~~~ 'Enable FIPS' is NOT Enabled Registry Path: HKCU:\SOFTWARE\Adobe\Acrobat Reader\DC\AVGeneral Value Name: bFIPSMode (Not found) Source: _Reviewed/MONT-WS-92040/Checklist/MONT-WS-92040_AdobeReaderDCContinuous_V2R1_20251023-142113.ckl Scan Date: 2026-01-14T12:57:25.224753 Technology Area: Windows Operating System
V-213193	CAT II	MONT-SW-89108	Adobe Acrobat Reader DC Continuous Track...	Adobe Reader DC must enable FIPS mode.	Documented Pending Review
Check Text Verify the following registry configuration: Note: The Key Names "bFIPSMode" is not created by default in the Adobe Reader DC install and must be created. Utilizing the Registry Editor, navigate to the following: HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\DC\AVGeneral Value Name: bFIPSMode Type: REG_DWORD Value: 1 If the value for bFIPSMode is not set to “1” and Type configured to REG_DWORD does not exist, then this is a finding. Fix Text Configure the following registry value: Note: The Key Names "bFIPSMode" is not created by default in the Adobe Reader DC install and must be created. Registry Hive: HKEY_CURRENT_USER Registry Path: \Software\Adobe\Acrobat Reader\DC\AVGeneral Value Name: bFIPSMode Type: REG_DWORD Value: 1 Finding Details Evaluate-STIG 1.2510.0 (Scan-AdobeReaderDCContinuous_Checks) found this to be OPEN on 12/17/2025 Username: MONT-SW-89108\Scan.Admin UserSID: S-1-5-21-4163428051-2768110797-3591193048-1016 ResultHash: 0953BC0DDDE64D9D7383C59DA5A8B777988C2D35 ~~~~~ 'Enable FIPS' is NOT Enabled Registry Path: HKCU:\SOFTWARE\Adobe\Acrobat Reader\DC\AVGeneral Value Name: bFIPSMode (Not found) Source: MONT-SW-89108_AdobeReaderDCContinuous_V2R1_20251217-202743.ckl Scan Date: 2026-03-04T15:25:15.734702 Technology Area: Windows Operating System

Page 1 of 2

Check Text

Fix Text

Finding Details

Check Text

Fix Text

Finding Details

Check Text

Fix Text

Finding Details

Check Text

Fix Text

Finding Details

Check Text

Fix Text

Finding Details

Check Text

Fix Text

Finding Details

Check Text

Fix Text

Finding Details

Check Text

Fix Text

Finding Details

Check Text

Fix Text

Finding Details

Check Text

Fix Text

Finding Details

Check Text

Fix Text

Finding Details

Check Text

Fix Text

Finding Details

Check Text

Fix Text

Finding Details

Check Text

Fix Text

Finding Details

Check Text

Fix Text

Finding Details

Check Text

Fix Text

Finding Details

Check Text

Fix Text

Finding Details

Check Text

Fix Text

Finding Details

Check Text

Fix Text

Finding Details

Check Text

Fix Text

Finding Details

Check Text

Fix Text

Finding Details

Check Text

Fix Text

Finding Details

Check Text

Fix Text

Finding Details

Check Text

Fix Text

Finding Details

Check Text

Fix Text

Finding Details

Check Text

Fix Text

Finding Details

Check Text

Fix Text