Prevent PDF Editing in Acrobat Reader on an RDS Server
Question details
System administrators need to prevent unauthorized users on an RDS server from making edits or annotations to PDF files using Acrobat Reader DC.
- Product
- Adobe Acrobat Reader DC
- Device & OS
- Remote Desktop Services (RDS) / Windows
- Scenario
- Multiple users access an RDS server where both Acrobat Reader DC and Acrobat DC are installed. Users without full Acrobat DC licenses appear able to edit PDFs via Reader, causing security and licensing concerns.
- Observed behavior
- Users with only Reader access can click the Edit tool and modify PDF files, adding comments and annotations despite only one user being licensed for the full Acrobat DC software.
Verify your Remote Desktop Services (RDS) deployment policies to ensure standard users are not mistakenly executing the full Acrobat DC application instead of Acrobat Reader.
Apply a Permissions Password to Restrict Changes
Use the document protection settings to encrypt the PDF and block unauthorized users from adding annotations, comments, or making structural edits.
Acrobat Reader cannot permanently edit PDF text or images without an Acrobat license. The modifications unlicensed users are performing are limited to free annotation tools such as sticky notes, highlighting, and text boxes. To block these entirely, you must apply a permissions password to the document itself.
Open your PDF file and navigate to the 'Tools' menu at the top of the window, then select 'Protect'.
Click on 'Encrypt' in the toolbar and choose 'Encrypt with Password' from the dropdown menu. Confirm the prompt to change the security settings.
In the Password Security settings window, check the box labeled 'Restrict editing and printing of the document. A password will be required in order to change these permission settings.'
Type a strong permissions password. Under the 'Changes Allowed' dropdown, select 'None' to block all annotations, comments, and form filling. Click 'OK' and save the document to apply the changes.
Segregate Application Access via RDS Group Policies
Restrict unauthorized RDS users from accessing the full Acrobat DC executable to prevent licensing overlap and confusion.
Secure and Restrict PDF Editing with WPS PDF
Easily protect your PDF files from unauthorized edits, annotations, and printing across any device or server environment by using the built-in encryption tools in WPS Office.
- 1. Open the PDF in WPS Office: Launch WPS Office and open the PDF document you want to secure from unauthorized edits.
- 2. Access the Protect Tab: Navigate to the 'Protect' tab located on the top ribbon menu and click on the 'Encrypt' button.
- 3. Enable Permission Restrictions: In the encryption window, check the option 'Set password to restrict editing and printing'.
- 4. Configure Security Settings: Enter a secure permissions password. Adjust the dropdown menus to block annotations, text copying, and page modifications.
- 5. Confirm and Save: Click 'Confirm' to apply the security settings, then save the document. Your PDF is now universally protected against unauthorized editing.
Frequently Asked Questions
Why can users edit PDFs in Acrobat Reader when they don't have a license?
Acrobat Reader users cannot permanently alter core text or base images. The 'editing' functionality they have access to is limited to free annotation tools, such as sticky notes, highlighting, shapes, and text boxes.
Does setting a permissions password affect users opening the PDF in different software?
No. Standard PDF permissions passwords encrypt the restrictions into the file's metadata. Whether the file is opened in Acrobat Reader, WPS PDF, or a web browser, the editing restrictions will be enforced.
How do I stop users from copying text from my PDF?
When setting up a permissions password under 'Protect' > 'Encrypt with Password', uncheck the 'Enable copying of text, images, and other content' option. This grays out the copy function for anyone who does not have the permissions password.
Is there a way to globally disable annotations in Acrobat Reader for all RDS users?
Yes, administrators can use the Adobe Customization Wizard or modify the Windows Registry on the RDS server to disable specific annotation tools in Acrobat Reader globally. However, file-level password protection is a more secure way to protect sensitive documents.
