How to Hide Acrobat Pro from Selected Users in an RDS Environment
Question details
The organization needs to install both Acrobat Pro and Reader on a shared Windows Server 2019 RDS environment while hiding Acrobat Pro shortcuts and context-menu entries from users who only require Acrobat Reader, without modifying the registry.
- Product
- Adobe Acrobat Pro and Reader
- Device & OS
- Windows Server 2019
- Scenario
- Deploying PDF software in a Remote Desktop Services (RDS) environment for mixed-license user groups.
- Observed behavior
- Acrobat Pro and Reader share application components, causing shortcuts and Pro-specific context menus to appear for all users regardless of their access rights or licensing.
Ensure you have administrator privileges on the Windows Server 2019 RDS host and clearly define the Active Directory user groups for both your Acrobat Pro and Acrobat Reader users.
Restrict Access Using RDS Application Publishing
Publish the applications selectively to specific user groups via RemoteApp to prevent unauthorized users from seeing or launching Acrobat Pro.
Because Acrobat Pro and Reader share the same underlying architecture on a single host, achieving clean separation on a standard desktop experience is difficult without registry edits. The best approach is to virtualize the delivery using RemoteApp.
Log in to your Windows Server 2019 RDS host as an administrator and launch the Server Manager application.
Click on 'Remote Desktop Services' from the left-hand navigation pane, then select the appropriate deployment collection for your users.
Under the 'RemoteApp Programs' section, run the wizard to publish Adobe Acrobat Pro and Acrobat Reader as separate applications.
Right-click the published Acrobat Pro application, select 'Properties', and navigate to the 'User Assignment' tab. Configure the settings to allow only the specific Active Directory group containing your licensed Acrobat Pro users.
Deploy Pro and Reader on Separate RDS Session Hosts
To ensure complete isolation of shortcuts and context menus, host the applications on entirely separate servers.
Simplify Enterprise PDF Deployment with WPS Office
Dealing with complex Adobe RDS deployments and shared component conflicts can be frustrating. WPS Office provides a lightweight, unified suite that includes robust PDF reading and editing tools alongside word processing and spreadsheets. It easily avoids the shortcut and context-menu conflicts typical of dual Reader/Pro installations.
- 1. Download the Installer: Visit the official WPS Office website to download the enterprise or free installer.
- 2. Deploy on RDS: Install the single, unified WPS Office package across your RDS or virtual desktop environments.
- 3. Manage Privileges: Use standard Group Policy Objects to manage user access to premium PDF editing features centrally.
Frequently Asked Questions
Why do Acrobat Pro context menus appear for Acrobat Reader users in RDS?
Acrobat Pro and Reader share common application components and registry keys when installed on the same Windows environment. This shared architecture causes Windows to display Pro context menus globally to all users on that host.
Can I hide Acrobat Pro shortcuts using Group Policy instead of the registry?
Yes, you can use Active Directory Group Policy Objects (GPOs) to apply Item-Level Targeting. This allows you to hide or delete specific Start menu desktop shortcuts for users who are not part of the designated Acrobat Pro security group.
Is it recommended to install both Acrobat Pro and Reader on the same RDS server?
It is generally not recommended if strict user isolation is required. Deploying them on separate RDS session hosts prevents component conflicts, accidental feature access, and potential licensing confusion.
