You’re using group policy to enforce the “Run only approved Windows applications” for a specific group of computers such as terminal servers. After updating Adobe Reader from version 9.0 to 9.2, users receive the message: “This operation has been cancelled due to restrictions in effect on this computer. Please contact your system administrator.”
My first thought was “The name of the executable must have changed”. A quick check disproved that. It is the same name with both versions: “AcroRd32.exe” which is in the list of approved applications. I took a look at the executables in the Adobe Reader program files folder and guessed that it wanted each user to accept the EULA. I added Eula.exe to the list of approved applications, ran gpupdate.exe on the terminal server that was experiencing the problem and the next time the user who experienced the issue ran Adobe Reader, they were prompted to accept the EULA:
Accepting the EULA resolved the issue for that particular user. This meant that each user would have to accept this EULA one time.
This is a good solution to this problem, but not good enough in my opinion since it could generate unnecessary help desk calls. While the above fix will resolve your problem, it doesn’t explain why this happened and that there’s an easier way to resolve this problem. The more I looked into this issue, the more I discovered why this happened and it’s not as simple as it seems. There is a global registry setting for accepting the EULA located in HKLM>Software>Adobe>Adobe Reader>9.0>AdobeViewer>EULA:
This causes Adobe Reader to work properly for the original administrator who installed it since they still have a value of 1 in HKCU>Software>Adobe>Adobe Reader>9.0>AdobeViewer>EULA which means this particular user has accepted the EULA. If you run Eula.exe from the Adobe Reader program files folder as an administrator and accept it, the “AdobeViewer” HKLM registry key is recreated along with setting the EULA value to 1. This will resolve the problem for all users without having to add Eula.exe to the list of approved applications and without requiring each user to accept the EULA. If a normal user runs Eula.exe and accepts it, they do not have the necessary permission to recreate the HKLM registry key or update its value which is why it is created in HKCU for them. When this happens, it only affects their particular user and each user will have to accept the EULA.
Sounds complicated, but just run Eula.exe from the Adobe Reader program files folder as an administrator, accept it, and the problem will be resolved for everyone who uses the terminal server.