AdobeGPOTemplates PowerShell Module

AdobeGPOTemplates module was designed to help create group policies (GPO) ADMX templates to configure and harden Adobe Reader and Adobe Acrobat.

Table of Contents

• Usage
  • Install the module
  • Functions
  • Help
  • What's Next
• Issues
• Todo
• Credits
• Other links

Usage

Install the module

# Check the mmodule on powershellgallery.com
Find-Module -Name AdobeGPOTemplates -Repository PSGallery

Version    Name                                Repository           Description
-------    ----                                ----------           -----------                                   
1.0.3      AdobeGPOTemplates                   PSGallery            AdobeGPOTemplates is a module ...

# Save the module locally in Downloads folder
Save-Module -Name AdobeGPOTemplates -Repository PSGallery -Path ~/Downloads

Stop and please review the content of the module, I mean the code to make sure it's trustworthy :-)

You can also verify that the SHA256 hashes of downloaded files match those stored in the catalog file

$HT = @{
    CatalogFilePath = "~/Downloads/AdobeGPOTemplates/1.0.3/AdobeGPOTemplates.cat"
    Path = "~/Downloads/AdobeGPOTemplates/1.0.3"
    Detailed = $true
    FilesToSkip = 'PSGetModuleInfo.xml'
}
Test-FileCatalog @HT

# Import the module
Import-Module ~/Downloads/AdobeGPOTemplates/1.0.3/AdobeGPOTemplates.psd1 -Force -Verbose

Check the command available

Get-Command -Module AdobeGPOTemplates

CommandType     Name                                               Version    Source
-----------     ----                                               -------    ------
Function        New-AdobeGPOTemplate                               1.0.3      AdobeGPOTemp...

Find the syntax

# View the syntax
Get-Command New-AdobeGPOTemplate -Syntax

New-AdobeGPOTemplate [[-Product] <string[]>] [[-Version] <string[]>] [-WhatIf] [-Confirm] [<CommonParameters>]

View examples provided in the help

# Get examples from the help
 Get-Help New-AdobeGPOTemplate  -Examples

NAME
    New-AdobeGPOTemplate

SYNOPSIS
    Create Admx and Adml GPO templates for Adobe products


    -------------------------- EXAMPLE 1 --------------------------

    PS C:\>New-AdobeGPOTemplate -Product Reader,Acrobat -Version DC,2017,2020

    Confirm
    Are you sure you want to perform this action?
    Performing the operation "Create files" on target "AdobeReader2020.adm?".
    [Y] Yes  [A] Yes to All  [N] No  [L] No to All  [S] Suspend  [?] Help (default is "Y"): A

    It creates the following files:
        Adobe.admx, Adobe.adml
        AdobeAcrobat2020.admx, AdobeAcrobat2020.adml
        AdobeAcrobat2017.admx, AdobeAcrobat2017.adml
        AdobeAcrobatDC.admx, AdobeAcrobatDC.adml
        AdobeReader2020.admx, AdobeReader2020.adml
        AdobeReader2017.admx, AdobeReader2017.adml
        AdobeReaderDC.admx, AdobeReaderDC.adml




    -------------------------- EXAMPLE 2 --------------------------

    PS C:\>New-AdobeGPOTemplate -Product Reader -Version DC -Confirm:$false

    It creates without asking for confirmation the following files:
    Adobe.admx, Adobe.adml,
    AdobeReaderDC.admx, AdobeReaderDC.adml

What's Next

Once you've created the Adobe GPO templates, you can test them locally and copy them to your local templates store:

copy .\*.admx -Destination C:\Windows\PolicyDefinitions\
copy .\*.adml -Destination C:\Windows\PolicyDefinitions\en-US\
gpedit.msc

Issues

• None

Todo

Coding best practices

• Use PSScriptAnalyzer module to validate the code follows best practices
• Add more hardening/security settings
• Review the effect of these settings on Adobe products
• Write Pester tests for this module

Credits

Thanks go to:

• @nsacyber:

Other links

• https://p0w3rsh3ll.wordpress.com/2017/08/21/create-adobe-gpo-templates/: