How to configure Protected View

In Protected View, PDF files are opened in read-only mode, and most editing actions are not allowed. This mode is disabled by default.

Protected View provides an additional level of security. When Protected View is enabled, PDFs are displayed in a restricted environment called a sandbox. This isolation of the PDFs reduces the risk of security breaches in areas outside the sandbox. Foxit strongly recommends that you use Foxit PDF Editor in Protected View if you are concerned about security, or if you frequently interact with PDFs on the Internet.

If enabled, users will see the message below whenever they open a PDF file:

Clicking on "Enable All Features" will disable Protected View for that specific file.

Protected view has three modes:

1. OFF: This is the default state. Protected View is disabled.
2. All Files: Protected View is enabled.
3. Files from potentially unsafe locations: Protected View will be enabled unless the PDF is opened from a Privileged Location. 

Audience:

Organizations looking to customize Foxit PDF Editor before deploying it to their knowledge workers. 

In this article:

• Deploy Foxit PDF Editor with Protected View enabled
  • Enable & Deploy Protected View using the Foxit Customization Wizard tool
    • Configure Privileged Locations
  • Enable & Deploy Protected View using registry
  • Enable & Deploy Protected View using command line
  • Enable & Deploy Protected View using GPO
• Manually enable Protected View

Configure Protected View using the Foxit Customization Wizard tool

1. Click on the Preferences Tab
2. Scroll down to "Protected View"
3. Select All Files
   • If you choose "Files from potentially unsafe locations" we strongly recommend you also setup Privileged Locations

• Default: Protect View is disabled. Users can choose to enable it in settings. 
• OFF: This is the default state. Protected View is disabled. Users will not be able to turn it on.
• All Files: Protected View is enabled. Users will not be able to turn it off.
• Files from potentially unsafe locations: Protected View will be enabled unless the PDF is opened from a Privileged Location. Users will not be able to turn it off.

Configure Protected View using registry

Navigate to key:

Computer\HKEY_CURRENT_USER\Software\Foxit Software\Foxit PDF Editor 11.0\Preferences\Trust Manager

Give string "iProtectedView" a value of "1" to enable Protected View on Files from potentially unsafe locations. 

Give string "iProtectedView" a value of "2" to enable Protected View for All files.

Configure Protected View using command line

There is no way to do this using command line.

Configure Protected View using GPO

1. Open Group Policy Editor
2. Navigate to Foxit PDF Editor > Preferences 
3. Click on Protected View
4. Select "Enabled" to enable protected view
5. Choose one of the modes

Manually enable Protected View

1. Open Foxit PDF Editor and navigate to the File Tab > Preferences
2. Select Security
3. Choose one of the modes

Setup Privileged Locations

You can only set up privileged locations using the Foxit Customization Wizard tool. Here's how.

1. Open the Wizard and Navigate to Registry 
2. Navigate to "HKEY_CURRENT_USER >Foxit Software > Foxit PDF Editor 11.0 > Preferences"
   • Right-Click on the Preferences folder and select New to create a new folder under Preferences called Security
   • Right-click on the new Security folder and select New to create a folder called "TrustedSites"
   • Right-click on the new Security folder and select New to create a folder called "TrustedFolders"
3. Add Trusted Sites
   • Click on the TrustedSites folder
   • Right-click on any empty space to the right and select New:
     • Type = REG_SZ
     • Value Name = csHost0
     • Value Data = the URL
   • If you need to add more Trusted Sites simply create a New one with the Value Name "csHost1", "csHost2" ... etc.
4. Add Trusted Folders
   • Click on the TrustedFolders folder
   • Right-click on any empty space to the right and select New:
     • Type = REG_SZ
     • Value Name = csFilePatht0
     • Value Data = the Path
   • If you need to add more Trusted Folders simply create a New one with the Value Name "csFilePath1", "csFilePath2" ... etc.