Intune App Packaging

How to Deploy Adobe Acrobat Reader DC via Intune (Win32 Packaging Guide)

Published 17 March 2026 · 6 min read

Adobe Acrobat Reader DC is a staple in most business environments. Adobe provides an enterprise MSI installer through their Distribution licensing programme. The main complexity is that Reader updates separately from the base install, so this guide also covers how to keep it current after initial deployment.

Contents
  1. Download the enterprise MSI
  2. Wrap with the Content Prep Tool
  3. Add the app in Intune
  4. Install and uninstall commands
  5. Detection rule
  6. Handling updates
  7. Known gotchas

Download the enterprise MSI

Adobe provides a free enterprise MSI through the Adobe Acrobat Reader Distribution programme. Go to:

https://get.adobe.com/uk/reader/enterprise/

Select Windows, choose your language (English UK), choose Reader DC, and download the offline full installer. This gives you a .msi file, not a stub downloader.

⚠️
Use the FTP/enterprise download, not the web installer
The standard "Download Adobe Reader" button on Adobe's site gives a small web installer that downloads the app at runtime. This will not work for Intune deployment. Make sure you are on the enterprise/distribution page and downloading the full offline MSI.

Wrap with the Content Prep Tool

IntuneWinAppUtil.exe -c "C:\AppSource\AcrobatReader" -s "AcroRdrDC.msi" -o "C:\IntunePackages"

Add the app in Intune

Intune Admin Centre → Apps → Windows → + Add → Windows app (Win32)
  1. Upload the .intunewin file
  2. Name: Adobe Acrobat Reader DC
  3. Publisher: Adobe Inc.

Install and uninstall commands

⚙️
Program settings
[]
Install commandEULA_ACCEPT=YES suppresses the licence agreement prompt
msiexec /i "AcroRdrDC.msi" /qn /norestart ALLUSERS=1 EULA_ACCEPT=YES
Uninstall commandVerify the GUID matches your version - it changes between major releases
msiexec /x {AC76BA86-7AD7-1033-7B44-AC0F074E4100} /qn /norestart
Install behaviour
System
Device restart behaviour
No specific action
💡
Suppress the Adobe update nag
Add DISABLE_ARM_SERVICE_INSTALL=1 to the install command to disable the Adobe Update Manager service if you plan to handle updates via Intune supersedence instead.

Detection rule

🔍
File detection rule
[]
Rule type
File
Path
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader
File or folder name
AcroRd32.exe
Detection method
File or folder exists
💡
Test your detection rule first
Before deploying to users, install the app manually on a test device and verify the detection rule matches. Run the detection script or check the file path exists before assigning to a group.

Handling updates after deployment

Adobe Reader DC releases security patches regularly. The two main approaches:

For most small businesses, leaving the Adobe Update Manager enabled is the right call. For environments with strict change control, supersedence is the better choice.

Known gotchas

32-bit vs 64-bit

Adobe Reader DC is a 32-bit application even on 64-bit Windows. The install path will be C:\Program Files (x86)\Adobe, not Program Files. Make sure your detection rule uses the correct path.

Protected Mode blocking PDFs on network shares

Adobe Reader DC enables Protected Mode by default, which can block PDFs opened from network shares. If users report PDFs not opening, deploy a registry key via Intune to add the network share to the trusted locations list.

Installer typeMSI (enterprise distribution)
Silent installYes - /qn EULA_ACCEPT=YES
Install pathProgram Files (x86) - 32-bit app
Reboot requiredNo
Update strategyARM service or Intune supersedence

Frequently Asked Questions

Q: How do I deploy Adobe Acrobat Reader silently via Intune?

Use: msiexec /i "AcroRdrDC.msi" /qn /norestart ALLUSERS=1 EULA_ACCEPT=YES. The EULA_ACCEPT=YES flag suppresses the licence agreement prompt during silent deployment.

Q: Where do I download the Adobe Reader enterprise MSI?

Download the enterprise offline MSI from https://get.adobe.com/uk/reader/enterprise/ - do not use the standard web installer as it downloads components at runtime and will fail in Intune.

Q: Is Adobe Acrobat Reader 32-bit or 64-bit?

Adobe Reader DC is a 32-bit application even on 64-bit Windows. It installs to C:\Program Files (x86)\Adobe, not Program Files. Make sure your detection rule uses the correct path.

Q: How do I handle Adobe Reader updates in Intune?

Either leave the Adobe Update Manager (ARM service) enabled for automatic updates, or deploy new versions via Intune supersedence for full version control.

// need intune set up properly?
Fixed-price Intune setup for UK businesses

I set up Intune for UK small businesses at a fixed price - app deployment, compliance policies, Conditional Access, and full documentation handed over at the end.

View Packages
More App Packaging Guides
→ Deploy PDF24 Creator via Intune→ Deploy 7-Zip via Intune→ Deploy VLC Media Player via Intune
#intune #app-packaging #win32 #endpoint-management