Last month I did a new ConfigMgr 2012 SP1 installation. In the task sequence used for OS deployment, Adobe Reader, Flash, Shockwave and Java was installed also. When doing a default deployment of these tools, all will auto-update after deployment. Most of times users don't have permissions for installing these updates, so that's definitely not what you want. Let's have a look now!
Let's start with Adobe Reader first. Adobe has a Customization Wizard available, for configuring Reader during deployment. One of the options is to disable auto-update of Reader. Just deploy the MSI with the created MST file and you're done!
For example: msiexec /i AdbeRdr11000_nl_NL.msi TRANSFORMS=AdbeRdr11000_nl_NL.mst /qn
Second one is Adobe Flash. Because many updates are released, disable auto-updates is needed. This time no Customization Wizard is available. Just create a file with the name mms.cfg that contains AutoUpdateDisable=yes.
During deployment copy the file with the following commands:
32-bit Windows editions: xcopy %0\..\mms.cfg “%Windir%\SysWOW64\Macromed\Flash” /I /Y
64-bit Windows editions: xcopy %0\..\ mms.cfg “%Windir%\System32\Macromed\Flash ” /I /Y
Verify settings in Flash Player Settings Manager within control panel.
Third one is Adobe Shockwave. This time another approach is needed again. Because no Customization Wizard is available, just use registry for that. Navigate to the registry section and modify the value of the following two keys:
Key: HKLM\SOFTWARE\Adobe\Shockwave 11\AutoUpdate > Value: n
Key: HKLM\SOFTWARE\Adobe\Shockwave 11\collectstats > Value: n
Verify via: Right click -> Shockwave Settings
Fourth and last one is Java Runtime. Because many updates are released, disable auto-updates is needed. Just use registry again for that. Navigate to the registry section and modify the value of the following two keys:
Key: HKLM\SOFTWARE\JavaSoft\Java Update\Policy
EnableJavaUpdate REG_DWORD 00000000
EnableAutoUpdateCheck REG_DWORD 00000000
After using this Adobe and Java update notifications are gone!