Adobe Unified Installer Standard Pro using ConfigMgr ConfigurationItem

A long time ago, back when Adobe Acrobat was versions 10 or 11, there was a way to read swidtags and figure out pro vs std. Gather some adobe serial numbers

With the Universal Installer, that is now per-user defined, and is not easily determined based on device info alone.

Following notes here https://www.adobe.com/devnet-docs/acrobatetk/tools/AdminGuide/identify.html, if you are using the Unified Installer (as of 2025, that would be software code of {AC76BA86-1033-FFFF-7760-BC15014EA700}), the way to determine what the user, who has logged into Adobe from Acrobat, is licensed for is to read this registry key:
HKEY_CURRENT_USER\Software\Adobe\Adobe Acrobat\DC\AVEntitlement\iEntitlementLevel

As you know, current user information is often not easy to tease out, when using ConfigMgr.  This method uses Configuration Baseline; where the Configuration Item runs only when a user is logged in, with user rights, and a complicated SQL query to pull out the results.

See the --> Attached <-- for the SQL query.  What it could look like, once you have deployed this, is similar to the below.

Steps:

• It is presumed the only devices you care about are the ones which have the Unified Installer of the type where it COULD be logged into by a user, where that user has a per-user license from Adobe for either Standard or Pro.  So the target for the Configuration Item and Baseline would be this Collection Query.  Step 1 would be to make a collection with this query

select SMS_R_SYSTEM.ResourceID 
from SMS_R_System 
inner join SMS_G_System_INSTALLED_SOFTWARE on SMS_G_System_INSTALLED_SOFTWARE.ResourceId = SMS_R_System.ResourceId 
where SMS_G_System_INSTALLED_SOFTWARE.SoftwareCode = "{AC76BA86-1033-FFFF-7760-BC15014EA700}"

• Make a Configuration Item. For the purposes of the SQL Query, that CI has been named "Acrobat Unifed Installer STD PRO"
  • The CI will have 1 detection Script, Powershell, with these 5 lines:

[string]$VerbosePreference = 'SilentlyContinue'
[string]$ErrorActionPreference = 'SilentlyContinue'
$RightNow = Get-date -Format "yyyyMMdd"
$AcrobatEntlementLevel = (Get-ItemProperty -Path 'HKCU:\Software\Adobe\Adobe Acrobat\DC\AVEntitlement' -Name 'iEntitlementLevel' -ErrorAction SilentlyContinue).iEntitlementLevel
if ($AcrobatEntlementLevel -ne $null) {Write-Host $env:username','$AcrobatEntlementLevel','$RightNow} else {Write-Host $env:username',999,'$RightNow}

• • Make sure you check the box about how this should run in user context.
  • 'what means compliant' , I used the string value of "everythingShouldFail", that is because for the SQL query, I want to get every box to tell me something.
• Make a Configuration Baseline, add the CI, and deploy the Baseline to the collection you made, to run; oh, every 7 days is fine.
• Wait.
• after waiting, take the SQL from the attached, and run it in your environment.  hopefully, you will get results similar to the screen shot.

END RESULT: you may want to run the report monthly for a few months, and then potentially you might notice that 'although Bob Smith has a license for Pro, based on what our procurement team has purchased for him, he is still sitting at a '1' for a value in his HKCU key...which means although Bob purchased a license, Bob never logged in via the Acrobat interface, so Bob is apparently not actually using the Pro features.  Perhaps we can save a license cost there.'